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IL. INTRODUCTION 


A. BACKGROUND 


A fault tolerant system is one that can continue the 
correct performance of its specified tasks in the presence 
of hardware and/or software faults. Fault tolerance is the 
attribute that enables a system to achieve fault tolerant 
operation. In many sensitive applications fault tolerant 
computing techniques are employed where the failure of these 
systems could lead to disastrous results. Examples of such 
sensitive applications include aircraft and spacecraft 
flight control systems and power plant control systems. A 
recent example of such a failure occurred with the loss of 
PanAmSat’s Galaxy 4 satellite. 

Galaxy 4’s attitude control system and 

an identical backup unit conked out at 

approximately 6 p.m. Eastern Daylight 

Time May 19 [1998], sending the 

Satellite into an uncontrolled spin. 

PRET els) 
While the loss of this satellite was not necessarily 
“disastrous,” it could indeed prove to be very expensive. 
The Galaxy 4 cost between $200 million and $250 million to 
bi@eta, launch, and insure. (Rema 


In the space environment there are three categories of 


radiation effects in integrated circuits. Total Dose 


Effects, Dose Rate Effects, and Single Event Effects. 

Within Single Event Effects are the four sub-categories: 
Single Event Upset (SEU), Single Event Latchup (SEL), Single 
Event Gate Rupture (SEGR), and Single Event Burnout (SEB). 
Total Dose Effects and Dose Rate Effects are destructive 
effects in integrated circuits arising from solar flares, 
neutrons from nuclear detonations, and protons in the Van 
Allen belts. In addition, three of the subcategories of 
Single event effects (SEL, SEGR, and SEB) are also 
destructive. These effects must be compensated for with the 
use of radiation hardening and shielding techniques. On the 
other hand, SEUs, which are essentially bit flips occurring 
within a device due to ionized charge being collected in a 
circuit, can be reduced by hardware architecture and 
software techniques such as redundancy. 

Operating computers in the space environment requires 
the use of very expensive radiation hardened (rad-hard) 
devices. In addition to the use of rad-hard technology, 
space systems also employ many other approaches to fault 
tolerance such as hardware redundancy, fault tolerant 
software algorithms, error detecting/correcting codes, etc. 
While. deploying reliable, fault tolerant computers in space 
will always require rad-hard components, the number of 


Suppliers of such devices is decreasing and the costs of the 


devices continues to increase. Many manufacturers are 
abandoning their production of rad-hard devices in favor of 
the more lucrative, booming consumer electronics industry. 
According to the May 1997 issue of Military & Space 
Electronics, “U.S. Department of Defense (DOD) leaders are 
Struggling to find new ways to safeguard the dwindling 
Supplier base of radiation-hardened microelectronics that 
are necessary to meet future spacecraft requirements.” [Ref. 
2] 

While the commercial satellite industry may fill the 
void, it 1s estimated that DOD must increase investments 
from $30 million per year to nearly $60 million per year to 
advance the technology and ensure a base of reliable 
Suppliers. [Ref. 2] 

The issue is in the fabrication process of the 
microelectronic devices. The production of the unique rad- 
hard devices requires specialized processes and demand for 
them is considerably less than that for consumer 
electronics. With the costs of modern fabrication lines 
reaching nearly $2.8 billion apiece, it 1s obviously cost 
prohibitive for companies to merely have two separate 
production facilities: one for rad-hard devices and one for 
non-rad-hard devices. A company producing both rad-hard and 


non-rad-hard devices will have to give up precious 


fabrication time to make a few devices for a limited market. 
This precious time takes away from the production of 
microelectronics for a booming PC market and could mean 
millions, if not billions, of dollars in lost revenue. 
Herein lies the fundamental economic reason for the 
escalating prices of rad-hard microelectronics. 

An approach to solving this problem, which is receiving 
considerable amount of research, is the development of new 
processes that allow companies to manufacture rad-hard 
devices without major changes to their fabrication process. 
Another possible approach is the development of alternative 
approaches in hardware and software fault tolerant design 
with non-rad-hard commercial-off-the-shelf (COTS) 
microelectronics to reduce the dependency on rad-hard 
technology. This research project addresses the latter 


approach. 


B. PURPOSE 


The goal of this research is to develop a fault 
tolerant computing testbed for use as a tool for the 
analysis of hardware and software fault handling techniques. 
In particular, the testbed is intended to allow the analysis 
of techniques to resolve faults caused by single event 
upsets. The testbed computer will employ a three CPU, 
triple modular redundant (TMR), design. The TMR testbed 
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will allow flexibility in the hardware and software design 
enabling direct performance analysis of various approaches 
to fault tolerant design. The testbed will enable fault 
injection simulations and direct radiation testing on the 
system for data analysis and hardware/software benchmarking. 
This project will help in the development of cheaper 
alternatives to the highly expensive radiation hardened 
devices. It will further the research of radiation testing 
and single-event upset research by providing a testbed for 
analysis of various hardware redundancy techniques as well 
as any software techniques chosen to be employed. The 
testbed will be used in direct radiation testing in a 
laboratory environment and/or placed ina satellite as an 
experimental payload to study the effects in the actual flux 
environment of the satellite. This study will benefit our 
development of small, economical satellites for both 


commercial and military use. 


Cc. THESIS ORGANIZATION 


The organization of this thesis largely follows the 
approach taken to the design of a TMR system. Chapter I is 
a brief introduction with background informacion. se elaeee= 
TI describes the microprocessor selection process and the 
characteristics of the selected processor. Chapter III 
presents various topics in hardware redundancy including 


> 


triple modular redundancy, voting techniques, 
synchronization and timing issues. Chapter IV contains the 
actual hardware design of the testbed. Simulation and 
results are presented in Chapter V. Finally the 


conclusions drawn from this research are presented in 


Chaptern vil. 


II. PROCESSOR SELECTION 


A. CHARACTERISTICS 


The place to start when designing a computer is with 
processor selection. The selection of the processor, or 
processors in the case of hardware redundancy, is where 
Critical decisions are made regarding expected operating 
environment. necessary performance, power consumption and 


Space limitations. 


12 COTS vs. Rad-Hard 


In June 1994, a directive was issued by then Secretary 
of Defense William Perry requiring the use of COTS parts in 
military systems whenever possible. As previously 
discussed, the availability of rad-hard parts is diminishing 
and as a result military, NASA, and commercial spacecraft 
builders may eventually be forced to use COTS technology. 

There are significant advantages to using COTS devices. 
COTS devices tend to be state-of-the-art and are therefore 
Significantly more capable than rad-hard devices. To put it 
in perspective, often the choice is between a COTS Pentium 
or a rad-hard 286 or 386 microprocessor. As an example, in 
July 1998 Space Electronics announced intentions to release 


a Single-board computer for space designed with primarily 


COTS devices... This product, running at 66 Mrz, is imtended 
to compete with the RAD6000 from Lockheed Martin Federal 
Systems, which runs at 33 MHz and costs twice as much. [Ref. 
3] The processor used in the new release product, the 6U 
VME SB486R radiation hardened 32-bit single board computer 
based on Intel’s 80486 microprocessor, is still an order of 
magnitude slower than the 300-400 MHz microprocessors 
currently available for desktop PCs. 

Other advantages of COTS systems include lower cost and 
better availability. Often a rad-hard microprocessor can 
cost many (10-15) thousands of dollars more than more 
capable, current technology COTS devices. In addition, rad- 
hard devices often have uncertain delivery times. Because 
of the declining rad-hard device market, these devices often 
must be special ordered from a limited number of available 
manufacturers. On the other hand, manufacturers of COTS 
devices often have stockpiles and can deliver a product 
within 24-48 hours. Many powerful COTS devices can even be 
obtained over the counter at several big name electronics 
stores. 

Commercial software is much more available for COTS 
devices. Software development is a very costly part of 
building any computer system. As the complexity of 


microprocessors increases, so does the complexity of the 


required software. If rad-hard devices are not identical to 
their COTS counterparts, software must be specially designed 
for this device. This is both expensive and time consuming. 
In addition, this specially designed software will have to 
undergo rigorous testing to check its response to unexpected 
Situations. [Ref. 4] This is in Contrast with sottwareeaor 
COTS devices where large companies design software for these 
devices. The software becomes proven over time through the 
high volume of users and the consumers actually participate 
in the testing of these products. 

Finally, while not necessarily an advantage of COTS 
devices themselves, it is possible to achieve some degree of 
radiation hardness by employing various techniques to shield 
COTS devices which are not themselves radiation hardened. 
[Ref. 4] While the use of shielding has shown to improve 
the reliability of devices in radiation environments, it 
adds to the physical space and weight requirements. 

However, there are disadvantages to using COTS devices. 
While the reliability of COTS devices used in benign 
environments is known, their reliability in stressing 
environments (radiation, thermal, vibration) is uncertain. 
(Ref. 4] The susceptibility of COTS devices eo radtaiemea 
induced failures is a major concern, and survivability in 


the space environment may be difficult with many COTS 


devices. While some COTS devices may have hardness levels 
of 100 kKRADS or more, this hardness varies greatly from one 
device to another. This hardness varies even for devices 
produced by the same manufacturer. Because of this lack of 
hardness assurance by manufacturers, each individual device 
will have to undergo testing and effectively be space 
qualified. 

Another disadvantage of COTS devices is they change 
rapidly. The semiconductor industry generally cycles new 
technology every 6-18 months. The devices continue to get 
faster, more capable, and require less power. The advantage 
here is clear for devices intended for the normal, non- 
stressing environment. However, as the devices get smaller, 
faster, and more complex, they are becoming more susceptible 
to radiation. Finally, in many cases, the required safety 
and reliability specifications, especially for military 


applications, simply cannot be met by COTS devices. “[Ref. 4] 


ee CISC vs. RISC 


Reduced instruction set computer (RISC) machines were 
designed to take advantage of the caching, prefetching, 
pipelining, and superscalar methods that were invented to 
improve the performance of complex instruction set computer 
(CISC) machines. The CISC machines depend on long complex 
instructions. The operand access for these instructions 
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required complex address arithmetic. As a result, CISC 
machines were unable to take full advantage of these 
techniques. 

The RISC focuses on reducing the number and complexity 
of instructions in the machine. This allows a reduction of 
actual machine hardware complexity. Early on, RISC machines 
operated such that each instruction completed in one clock 
cycle. This was achieved by limiting the instructions in 
RISC machines to a fixed length, usually 1 word. Thus, ina 
32-bit machine, one 32-bit word specifies everything there 
1s to know about the instruction. 

With the advent of pipelining, the current goal is that 
(at least) one instruction will begin and (at least) one 
instruction will complete during every clock cycle. Since 
program execution time depends on throughput and not on 
individual instruction execution times, issuing (and thus 
Gomoleting) One 1mStsuction per clock Cyele 1s an 
appropriate goal. This is achieved by making instructions 


Simple, not by making the clock period longer. 


a. Size, Pinout, Power 


The size of the device determines the physical space 
required on the assembled board. Space and weight 
constraints are critical limitations imposed on systems for 
satellites and other space applications. Similarly, power 
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consumption is a critical factor in space applications where 
a steady, endless supply of power from a standard 120 volt 
outlet 1s not available. In applications where power comes 
from batteries and/or solar cells, available power 1s a 
precious commodity. 

The pinout of the device is often directly related to 
its physical size. In addition, many devices reduce their 
pinout requirements by having individual address and data 


lines multiplexed together on one interface pin. 


4. Bus Width and Memory Size 


The bus width of COTS devices essentially follows 
Current trends. While many processors are available today 
with 64-bit architectures, the RAD6000 microprocessor 
(considered to be the industry standard for radiation 
hardened microprocessors) incorporates a 32-bit 
architecture. Compared to 32-bit architectures, a 64-bit 
bus effectively doubles (design dependent) the pinout 
requirements and correspondingly increases the power 
consumption of the device. 

As bus size increases, the complexity of the 
interconnectivity hardware increases as well. Particularly 
in a TMR design where 3 microprocessors are connected 


together with voting hardware, increasing the bus width from 
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32-bits to 64-bits requires a rather significant increase in 
hardware and logic. 

The size of the physical memory that the processor can 
use 1S a Significant factor in space applications as well. 
In space applications where large volume secondary storage 
media is generally not available, the bigger the physical 
memory potential the better. Of course, this is essentially 
limited by the bus architecture of the device. A device 
with a 64-bit bus can accommodate a larger physical memory 
space than a 32-bit bus device. Without large secondary 
storage media, all operations will be performed using ROM 
and RAM with varying combinations of ROM and RAM types 
depending on the application. Therefore, it is necessary 
that the available physical address (memory) space be large 


enough to accomplish the intended tasks. 


53 Speed 


The speed of the device 1S an important issue. 
However, in a TMR design, the speed at which the system can 
operate will be limited by the propagation time of the 
voting and vote error control logicmas well as the memory 
setup and hold times. Although new personal computers are 
currently available with processors running at 300-400 MHz, 
the current new radiation hardened microprocessors run at 
336 6aMEiz.. 


1b. 


The speed of the microprocessor chosen for this TMR 
design will be limited by the critical path logic 
propagation time in the several FPGAs chosen to implement 


the voctingwand vetesexurer coOnzuol. 


Gy Multiple Chip vs. Single Chip Implementations 


The tradeoff associated with a single chip processor 
versus a processor which requires additional hardware 
peripheral devices 1S a significant issue. This is 
especially true ina TMR design where each address/data line 
as well as each control line has to be voted to ensure 
agreement between the three processors. In addition, in 
space applications the potential for radiation induced error 
increases with each additional piece of hardware added. 
Other problems include fault localization. With 
microprocessors with external peripheral device 
requirements, voting and vote error control complexity is 
increased. Also, board reliability is inversely 
DPEODOLELTOnal toe tie NuMmoer OF "chips "Ormert - 

The overall complexity of the board design increases 
as well with microprocessors with external peripheral device 
requirements. In a TMR design, this increased complexity 1s 
compounded. In a single chip microprocessor, the associated 
interface complexity is internal to the device. Therefore 
radiation-induced faults are limited to a single device when 
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performing processor voting which corresponds to simpler 


voting logic and less hardware requirements. 


B. PROCESSOR REVIEW 


As part of this research, several microprocessors were 
analyzed based on the microprocessor characteristics 
discussed in the preceding section. Tables 1, 2, and 3 
contain data concerning the various COTS CISC and RISC 
microprocessors that were considered in developing the 
testbed. 

The processor chosen was the R3081 RISC Microcontroller 
manufactured by Integrated Device Technologies (IDT). The 
reasons for this selection were many. From the outset of 
this research project, the intent was to choose a COTS 
device for the TMR design. 

The R3081 is a COTS, single chip, RISC archurecture 
machine, with a 32-bit multiplexed address/data bus. The 
highly flexible and user configurable device can run between 
20 and 50 MHz and is readily available. 

The determining factor for selecting the R3081 was the 
availability of radiation environment performance data from 
the Naval Research Laboratory (NRL). The R3081 was used in 
a triple vote experiment deployed on the Microelectronics 
and Photonics Testbed (MPTB). The MPTB 1S a space 
experiment launched in 1997 into a high radiation orbit to 
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test performance, reliability, and survivability of new 
microelectronics and photonic devices operating in the space 
radiation environment. The triple vote experiment was one 
of 24 experiments onboard the MPTB which were individually 
scheduled by a core controller. The purpose of this 
experiment was to measure SEU, SEL, and Total Dose effects 
in IDT R3081 microprocessors vs. epi thickness. The three 
microprocessors used had epi thicknesses of 6, 8, and 12 
microns respectively. The MPTB design was obtained from NRL 
and used as a starting point for the testbed designed in 


this research project. 


Characteristic AM2 9000 AM29050 : PowerPC 603e 

AMD AMD | 13M, Motorola 
Processor Streamlined Streamlined RISC 

Architecture instruction instruction 

Package 168-PQFP or 169- 169-PGA 
PGA | | 
Accelerator 
Memory Management Y Y ¥ 

Unit 

|Speed (MHz) 16-33 20-40 200-250 
Integer ye N x 
Multiply/Divide 

bit data bus, 32- 
bit address bus 

_Demultiplex Signal 
Physical Address 

| Space 

Power (watts) oe ee 

Single Chip x 

Built-in Master/Slave | y i 2 





Table 1. Microprocessor Review (1 of 3). 
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Characteristic PowerPC 6046 |! PowerPC 750 | . R3081 


Manufacturer IBM, Motorola IBM. Motorola Lae 
Processor RISC RISC MIPS/RISC 
, Architecture 


NE 
eee 255-CBGA | 360-CBGA 84-pin MQUAD/ PLCC 
Floating Point y Ly | Y 


Accelerator | 





“Memory Management .#30Y YY 
Orne 

| Speed (MHz) ; 250-350 | 200-300 | 20-50 

' Integer Lay +¥ (3) eZ.) 


Multiply/Divide 


Bus Architecture 
t 





















64-bit data, 32- 32-bit data, 64- 
bit address — bit address address/data 
multiplexed 





‘Demultiplex Signal (N/A N/A | ¥ 
RR 
‘Physical Address | 4GB ) 


| Space | 
Power (watts) '6.0-14. ae =e 0 cae oe 








Single Chip 
, Built-in Master/Slave =N 'N iN 





Table 2. Microprocessor Review (2 of 3). 


Characteristic R36100 R4650 R5000 





|Manufacturer | IDT TD? IDT 

Processor MIPS/RISC PMIPS-ZIL/RISC MIPS-IV/RISC 

Architecture | 

| Package | 208-pin MQUAD 288-pin MQUAD 223-pin CPGA or 
272-ball SBGA 

Ploating Point iN iY Y 

Accelerator | 

Memory Management Ly (¥ Ne 

Unit | 

Speed (MHz) | 20-33 100-180 200 

Integer Y x x 

Bus Architecture |8-, 16-, 32-bit |32- or 64-bit 64-bit 

programmable ,address/data address/data 

address and data :multiplexed multiplexed 
Demultiplex Signal |N/A ae N 


Physical Address Ris | 4G8 
Space 

Power (watts) | 2-3 .646-3.465 geod =6.25 
Single Chip 





y 
Built-in Master/Slave |N 


Table 3. Microprocessor Review (3 of 3). 
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Cr CHARACTERISTICS OF SELECTED PROCESSOR 


The IDT R30xx family of microprocessors is intended to 
offer the high-performance associated with the MIPS RISC 
architecture for low-cost, simplified, power sensitive 


applications. [Ref. 5] Some features of the R3081E include: 


e High level of integration minimizes cost 

e Over 40 MIPS at 50 MHz 

e Low cost 84-pin packaging 

e Large on-chip user configurable instruction and data 
caches 

e On chip Floating Point Accelerator (FPA) 

® 20 throwgnes08MHZ cperauaen 

e Multiplexed address/data bus interface with low 
cost, low speed memory systems with high speed CPU 
Support 

e On-chip 4-deep write buffer eliminates memory write 
stalls 

e On-chip 4-deep read buffer supports burst or simple 
block reads 


Figure 1 shows a block diagram of the IDT R3081E 


microprocessor. Some of the highlights include: 


e System Control Coprocessor (CPO) 
Y Dedicated Exception/Control Registers 
Y Dedicated Memory Management Registers 
e Integer CPU Core 
¥ 32 32-bit general registers 
Y ALU, Shifter, Mult/Div Unit, Address Adder, and PC 
Germero | 
e Floating Point Coprocessor (CP1) 
Y 16 64 bit registers 
Y Exponent, Add, Divide, and Multiply Units 
Y Floating Point Exception/Control 
e Configurable Instruction and Data Caches 
e 4-deep Read and Write Buffers 
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Figure 1.5 IDT R308 Block Diagzam. Meazome Ret. (5/2 
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ies CPU Core 


The CPU Core is a full 32-bit RISC integer execution 
engine, capable of sustaining close to a single cycle per 
instruction rate. It contains a 5 stage pipeline and 32 


orthogonal 32-bit registers. [Ref. 5] 


2. System Control Co-Processor 


The integrated on-chip System Control Co-Processor 
(CPO) manages both the exception handling of the CPU and the 
virtual to physical address mapping. The fully associative 
64-entry Translation Lookaside Buffer (TLB) maps 4kB virtual 
pages into the physical address space. The virtual to 
physical mapping includes kernel segments which are hard- 
mapped to physical addresses, and kernel and user segments 
which the TLB maps 4kB page by 4kB page into anywhere in ene 
4GB (potentially) physical address space. The TLB also 
allows 8 pages to be locked by the kernel to ensure 


deterministic response in real-time applications. [Ref. 5] 


Be Floating Point Co-Processor 


The R3081 also incorporates an integrated R3010A 
compatible FPA which is co-processor 1 (CP1) to the CPU. 
The high-performance co-processor provides separate add, 
multiply, am@e@divide ftmetional@tunits for single and™ double 


precision floating point arithmetic. To the software 


Z0 


engineer, the FPA simply appears as an extension of the 
integer execution unit with 16 dedicated 64-bit floating 
point registers. The software references these as 32 32-bit 


registers when performing loads or stores. [Ref. 5] 


4. Clock Generator Unit 


The on-chip clock generator manages the interaction of 
the CPU core, caches, and bus interface. It includes a 
clock doubler to provide a higher frequency signal to the 


internal execution core. [Ref. 5] 


5. Instruction and Data Caches 


The on-chip cache is default configured to 16kB 
Instruction Cache and 4kB Data Cache. However, the cache 
can be reconfigured by system software to 8kB of Instruction 
and 8kB of Data caches. The instruction cache is organized 
with a line size of 16 bytes (four 32-bit entries) which 
achieves hit rates in excess of 98% in most applications. 
The data cache is organized as a line size of 4 bytes (one 
word) and achieves hit rates near 95% in most applications. 
The high hit rates associated with the instruction and data 
cache contribute significantly to the performance of the 
R3081E. The instruction cache is a direct mapped cache 
capable of caching instructions from anywhere in the 4GB 


physical address space. The instruction cache is 


ie 


implemented using physical addresses and physical tags 
(rather than virtual addresses or tags) to eliminate the 
requirement of flushing on context switch. As with the 
instruction cache, the data cache 1s a direct mapped 
physical address cache capable of mapping any word within 
the 4GB physical address space. However, the data cache is 
implemented as a write-through cache to insure that main 
memory is always consistent with cache memory. In order to 
minimize processor stalls due to data write operations, the 
bus interface utilizes a 4-deep write buffer which 
“captures” address and data information at the processor 
execution rate, allowing it to be written to main memory at 
the memory speeds with minimum impact to overall system 


performance. [Ref. 5] 


6. Bus Interface Unit 


Because the R3081 uses its large internal caches to 
provide the majority of the bandwidth requirements of the 
execution engine, it can utilize a much simpler bus 
interface connection to slower memory. The bus interface 
utilizes a 32-bit address and data bus multiplexed onto a 
Single set of pins. It also provides an ALE (Address Latch 
Enable) output signal to de-multiplex the A/D bus, and 
Simple handshaking signals to process CPU read and write 
requests. The DMA Arbiter allows an external master to 


Ze 


control the external bus if desired. As described 
previously in the Instruction and Data Cache section, a 4- 
deep write buffer decouples the speed of the execution 
engine from the speed of the main memory system. The write 
buffers capture and FIFO processor address and data 
information in store operations and schedule them on the bus 
at a rate that can be handled by the system memory. The 
read interface is capable of both single word and quad word 
reads. Single word reads utilize a simple handshake, and 
quad word reads can utilize either a simple handshake or a 
tighter timing mode when the memory system can burst data at 
the processor clock rate. In order to accommodate slower 
quad word reads, the 4-deep read buffer FIFO is ‘utilized 
allowing the external interface to queue data within the 
processor before releasing it to performa “burst” fill of 


the internal caches. [Ref. 5] 


ee System Usage 


The bus imtertace of Ene wip RoOx Kaew dang seme 
R3081E) family was specifically designed to allow a wide 
range of memory systems. A typical system using off-the- 
shelf logic devices contains simple transparent latches to 
de-multiplex the R30xx address and data busses and the A/D 
bus; the data path between the memory system and the A/D bus 
is managed by octal transceivers; and a small set of PALs is 
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used to control the various data path elements, and to 
control the handshake between the memory and the processor. 


(Ref. 5] 


8. Instruction Set Architecture 


All instructions and addresses are 32 bits and the CPU 
utilizes a 5-stage pipeline to achieve a near one 
instruction per clock cycle execution rate. There are five 


basic. Groups Of inStruceions: 


e Load/Store 
Y Move data between memory and general registers 
e Computational 


Y Perform arithmetic, logical, and shift operations 
on values in registers 


e Jump and Branch 
¥ Chatige control Piow tof Preqran 
e Co-Processor 
Y Perform operations on the co-processor set 
e Special 
Y¥ Movement of data between special and general 
registers, system calls, breakpoint operations 
Figure Z displays ehe instruction teormats of the Reed 
processor. Load/Store instructions are all encoded as 
Immediate, or I-Type, instructions. Computational 
instructions are encoded as either Register, or R-Type, 
instructions when both source operands and the result are 
general registers or I-Type when one of the source operands 


1S a 16-bit immediate value. Jump and Branch instructions 


can be either J-Type (target address 1s PC + 26-bit 


24 


immediate value), R-Type (target address is 32-bit value 
contained in one of general registers), or I-Type (Branch 
Instructions where target address is formed from a 16-bit 
displacement relative to the PC). Jump and Link 
instructions save a return address in register R31. Co- 
processor Loads and Stores are always I-Type. Special 


instructions are always encoded as R-Type. [Ref. 5] 


-Type (Immediate) 
31 ZOe75 21720 ODS 0 





J-Type (Jump) 


S| ZO°25 


0 
mf me 


R-Type (Register) 
51 26 25 24020 1S 1 AO G0 0 


















































where: 

lop ..___s—«| 6-bit operation code 

S-bit source register specifier 

S-bit target register or branch condition 

16-bit immediate, or branch or address displacement 
26-bit jump target address 

S-bit destination register specifier 








S-bit shift amount 
6-bit function field 


Figure 2. Instruction Formats. After Ref. [5]. 
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Table 4 lists the inStruction set mnemonics of R3081E 


processor. 


9. The Pipeline Architecture 


The execution of a single instruction is performed in 


five separate steps: 


* Instructiten Febeeh (IF) 
¥ ImStruction virtual address ervanclatecnre pm cite aa 
address and read from internal instruction cache 


e Read (RD) 

Y Instruction decoded and required operands read 
e ALU (ALU) 

Y¥ Required operation is performed 
e Memory Access (MEM) 


“ Tf anstruction was a Load or Store, tEhevdatascacte 
1s accessed 


e Write Back (WB) 
Y Results from ALU step updated in on-chip register 
file 
Figure 3 illustrates the pipeline and the capability to 


execute 5 instructions per cycle. Pipeline hazards in the 


Current 


Cake 
Cycle 





Faigune 3. ~S5-Imstructions per Clock Cycle. | Afte~n Ret. [5]: 
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R3081 are handled in both hardware and software. The 
hardware methods used are forwarding and stalling (minimal). 
The hardware methods deal with inStructions that need a 
result from the register file of the immediately prior 
instruction and in integer multiply and divide operations 
where an instruction attempts to access the LO or HI 
registers prior to completion of the multiply or divide. If 
this happens, the requesting instruction will be blocked 
until the result is ready. The software method used is an 
optimizing compiler and peephole scheduler of the assembler. 
Two instruction classes which use the software method are 
Load instructions and Jump and Branch instructions. Sern, on 
these instruction classes have a delay, or latency, of one 
cycle. Rather than include extensive pipeline control 
logic, the CPU gives responsibility for dealing with “delay 
slots” to software. The peephole optimizer, performed as a 
part of compilation or assembly, can reorder the code to 
ee that the instruction in the delay slot does not 
require the logical result of the “delayed” instruction. 


[Ref. 5] 


D. SUMMARY 


Having completed a review of some of the desired 
characteristics of a microprocessor to be investigated when 
designing a system, the IDT R308] RiS@ mecroprocesser a a 
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[a eo DESCRIPTION a DESCRIPTION 


LB 
LBU 
LH 
LHU 
LW 
LWL 
LWR 
SB 
SH 
SW 
SWL 
SWR 


ADDI 

ADDIU 

SLTI 
LTIU 


ANDI 
okey 
XORI 


EuUL 


ADD 
ADDU 
SUB 
SUBU 
SLT 
SLTU 


OR 
XOR 
NOR 


SLL 
SRL 
SRA 


SLLV 
SRLV 
SRAV 


Table 4. 


Load/Store Instructions 
Load Byte 
Load Byte Unsigned 
Load Halfword 
Load Halfword Unsigned 
Load Word 
Load Word Left 
Load Word Right 
Store Byte 
tore Halfword 
Store Word 
Store Word Left 
Store Word Right 


Arithmetic Instructions 

(ALU Immediate) 

Add Immediate 

Add Immediate Unsigned 

Set on Less Than Immediate 

Set on Less Than Immediate Unsigned 


AND Immediate 
OR Immediate 
Exclusive OR Immediate 


Load Upper Immediate 


Arithmetic Instructions 
(3-operand, register type) 
Add 

Add Unsigned 

Subtract 

Subtract Unsigned 

Set on Less Than 

Set on Less Than Unsigned 
AND 

OR 

Exclusive OR 

NOR 


Shift Instructions 


ism et Lert Logucal 


Shift Right Logical 
Shift Right Arithmetic 


| Shift Left Logical Variable 


Shift Right Logical Variable 
Shift Right Arithmetic Variable 
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MULT 
MOLTU 
DIV 
DIVU 


MFHI 
MTHT 
MFLO 
MTLO 


~ 


JAL 
JR 


JALR 
BEQ 
BNE 
BLEZ 


BGTZ 
BEEZ 
BGEZ 


BLTZAL 
BGEZAL 


SYSCALL 
BREAK 


LWCz 
SWCZ 
MTGZ 
MFCz 
CTeGz2 
GFGz 
COPz 
BCzr 
BCZF 


MTCO 
MFCO 
TLBR 
TLBWI 
TLBWR 
TES EP 
RFE 


INStruction Mnemonics. 


Multiply/Divide Instructions 
Multiply 

Multiply Unsigned 

Divide 

Divide Unsigned 


Move From HI 
Move To HI 
Move From LO 
Move To LO 


Jump and Branch Instructions 
Jump 

Jump and Link 

Jump co Register 


Jump and Link Register 

Branch on Equal 

Branch on Not Equal 

Branch on Less Than or Equal to 
Zero 

Branch on Greater Than Zero 
Branch on Less Than Zero 

Branch on Greater Than or Equal to 
Zero 

Branch on Less Than Zero and Link 
Branch on Greater Than or Equal to 
Zero and Link 


Special Operations 


System Call 
Break 


Coprocessor Instructions 
Load Word from Coprocessor 
Store Word to Coprocessor 
Move to Coprocessor 

Move from Coprocessor 

Move Control to Coprocessor 


| Move Control from Coprocessor 


Coprocessor Operation 
Branch on Coprocessor z True 
Branch on Coprocessor z False 


System Control Coprocessor (CPO) 
Instructions 

Move to CPO 

Move from CPO 

Read Indexed TLB Entry 

Write Indexed TLB Entry 

Write Random TLB Entry 

Probe TLB for Matching Entry 
Restore from Exception 


After Ref. [5]. 


chosen. Although the performance of the R3081 is much less 
than that of the current microprocessors available, it does 
have the performance and computing power necessary for 
analyzing fault tolerant improvement techniques in the 
presence of radiation induced SEUs. In addition, the R3081 
has previously been tested by the Naval Research Laboratory 
and flown in actual space satellite experiments. Finally, 
the R3081 employs a flexible bus interface which makes it a 
good candidate for use in a redundant hardware design. 

In the next chapter, some of the concepts of triple 
modular redundancy, a hardware redundancy technique, are 
covered. This is followed by a description of a simple 
R3081 based system. Finally, a brief overview of how three 
R3081 processors were incorporated into a redundant design 


1s presented. 


Pie 





III. HARDWARE REDUNDANCY 


There are many techniques available to achieve some 
degree of fault tolerance. Fault tolerant systems basically 
employ some combination of hardware, software, time, or 
information redundancy. The purpose of this chapter is to 
introduce the concept of triple modular redundancy (TMR). 
The initial design of the testbed will employ a TMR design 
and as such TMR issues are dealt with thoroughly. The 
overall goal of this project is to design a testbed which 
allows flexibility in the ultimate methods employed to 
achieve fault tolerance. This will allow the user to 
compare and contrast the fault tolerant performance of many 


combinations of the different techniques. 


A. TRIPLE MODULAR REDUNDANCY (TMR) 


A common form of hardware redundancy is triple modular 
redundancy (TMR). The basic concept is fairly simple. ets 
involves the triplication of the hardware and performing a 
majority vote to determine the output of the system. This 
technique is considered to be passive hardware redundancy in 
that it masks the occurrence of faults. Fault tolerance is 
achieved through the use of majority voting techniques 
without the need for fault detection or system recovery. 


[Ref. 6] If one of the modules becomes faulty, the two 
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remaining modules, which are fault-free, mask the fault when 
the majority vote 1s performed. In short, TMR uses three 
identical modules, performing identical operations, with a 
majority voter determining the output, as shown in Figure 4. 
In a TMR system with three microprocessors, an SEU 
could cause one processor to branch to a completely wrong 
address. That processor will continue to cause errors on 
all votes until it 1S reset to the state of the correct 
processors. Until it is reset, the system is no longer a 
TMR system. It is a dual processor with comparison system 
which provides for error detection but no error Correcetem 
One of the primary disadvantages with a TMR system is 
that the system can be no more reliable than the voter 
itself. Indeed the voter becomes a single point of failure— 
if the voter fails, the entire system fails. [Ref. 6] 
Several techniques can be used to overcome this. One method 
1s the use of triplicated voters which produce three 
independent outputs. Here again three identical modules 
receive identical inputs and perform the same operations on 
those inputs. Each module provides its output to three 
separate and independent voters to produce the three 
results, as shown in Figure 5. Each output 1S correct as 
long aS no more than one module, or input, is faulty. In 


essence, the voter is no longer the single point of failure. 
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A multi-stage TMR system can be built by 
interconnecting this triplicated voter approach as shown in 
Figure 6. [Ref. 6] A multi-stage system with triplicated 
voters can provide some error correction in that an error in 


a module of one stage is masked and the voters provide three 






Module 1 


Module 2 


Module 3 


Input 1 


Input 2 Output 






Input 3 


Figure 4. Triple Modular Redundancy. After Ref. [6]. 
Input 1 Module 1 Output 1 
Input 2 sid Output 2 
Input 3 Module 3 Output 3 

Figure 5. TMR with triplicated voters. Satter ier sae 
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independent and “corrected” results to the next stage. At 
the final stage, the three independent outputs can then be 
voted again to form a single output. However, this final 


voter could again become the single point of failure. 


Input 2 Module 2 on Module 2 ao 
Input 3 Module 3 Yu 7 Module 3 Vs 
Figure 6. Multiple-stage TMR system. After Ref. [6]. 


A generalization of the TMR approach is N-Modular 
Redundancy (NMR). [Ref. 6] TMR is based on the techniques 
of NMR. There are N redundant modules vice three. In 
general, Nis chosen to be odd so that majority voting 
techniques can still be applied. The advantage gained is 
that more module faults may be tolerated. In an NMR system 


with N redundant modules, majority voting will allow the 
system to tolerate faults in [N/2| —- 1 modules. The 


primary concerns associated with NMR system deal with added 
logic hardware and circuit complexity. Clearly, one could 


design a system that continues to employ NMR voting at 
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multiple stages to improve system reliability. Referring to 
Figure 5, the triplicated voters could even be voted again 
to ensure faults are detected in the voters themselves. 

This could conceivably continue in an endless cycle. 
Practical applications and design constraints often prevail 
and are the limiting factor to checsing NV an an Nim system, 


[Re£=. 6] 


ae Voting Techniques 


Voting may occur at several locations within a system. 
Take, for example, a TMR system used as an industrial 
process controller. [Ref. 6] The controller could sample 
erom three mi centical, sindependen= sense Seand, pen -ocmmc cre 
to determine which sensor value to use. This data is 
provided to three identical, independent modules to perform 
some calculations on the sensor data, and then a majority 
vote on these calculations is performed to perhaps adjust 
the controls of the process. The voting can be used on both 
analog and digital data. This approach masks and contains 
the effect of a faulty sensor. An alternative method might 
be to provide the values from each of the three sensors 
directly to a dedicated module, perform the necessary 
calculations, and then vote the results from the three 
modules. Here, faulty sensor data would be allowed to 
migrate into the processing modules. The tradeoffs between 
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the two approaches are slight but would obviously have to be 
analyzed to determine the appropriate design based on the 
application. 

A hardware voter is a relatively simple circuit to 
design and implement. All that is needed is a combinational 
logic cirecuitethat produces a 1 when a@ majority of the ineue 
bits are 1 and a O when a majority of the input bits are 0. 
An implementation of a one-bit majority voter is shown in 
Figure 7. Alternately, the carry out output of a 1-bit full 
adder will produce the necessary output to implement the 1- 
bit Majority voter. Am-S, 16, 32, oY 64-bit ivecer ean 2 


constructed by replicating Emme. circuLt an Beoure. 7ein 


Input A 


Input § 


input ¢€ 





Figm@ee 7o0 |-bitsumajyerity voter. Arter Ref. oir 


parallel for each bit that needs to be voted. One can see 
the amount of additional logic grows rapidly if, for 
instance, the three independent modules in a TMR system to 


be voted are 32-bit microprocessors. The desired 
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reliability will certainly have to be weighed against the 
Space, power, and weight limitations, especially in 


satellite and other space applications. 


2. Voting Issues 


In practical applications, timing will have to be 
considered when performing majority voting. If the three 
inputs to a majority voter arrive at different times, then 
depending on when the output of the voter is sampled, an 
incorrect vote may be generated. In many applications, an 
incorrect result cannot be allowed even for a very small 
period of time. [Ref. 6] There are techniques which can be 
applied that will force the inputs to the voter to be 
synchronized so that the output of the voter is sampled at 
the correct time. One approach to achieving synchronization 
involves a two-phase clock which drives master-slave D flip- 
flops on each input to the majority voter. The costs of 
using this synchronization approach will be in terms of 
additional logic and timing delays. 

Another problem that may be encountered in hardware 
voting is that the three modules in a TMR system, or the 
three sensors that feed the three modules, could disagree 
slightly even in a fault-free environment. These devices, 
sensors in particular, can seldom be produced so that they 
generate identical results under the same circumstances. In 


oe 


addition, a single analog-to-digital converter can produce 
results that differ slightly in the least significant bits, 
even if the exact same signal 1s applied to it several 
different times. [Ref. 6] One technique used to get around 
this 1s to ignore a set number of the least significant bits 
generated. The assumption is that the result will differ in 
only a known number of the least significant bits. An 
alternative approach is the mid-value select technique. The 
voter basically just selects the middle value of the three 
inputs as shown in Figure 8. Essentially, it is the same 
concept aS a majority voter but is necessary when the three 
values may have slight perturbations between them. The 


middle value is chosen 


Sensor 
Values 





Selected 
> 2 ————$——— 






Time 


Figure 8. Mid-value select technique. After Ref. [6]. 
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because an assumption is made that only one of the inputs 
can be faulty at one time. Thus, since minor perturbations 
are expected the middle value will always be one from a 
“good” input. The middle value is chosen instead of taking 
an average of the three inputs. This is because in the 
event that one input is clearly faulty as shown in Figure 8, 
the average would be adversely affected. In effect, the 
faulty input 1S ignored by selecting the middle value. 

Another problem that must be realized in a TMR system 
with majority voting is that identical errors in two of the 
modules will have to be tolerated. The errors will produce 
results that when passed to the voter will be selected as 
Ene majority. The possibility or this cCceuuring mes cue 
consequences would definitely have to be investigated 
depending on the application. 

A significant danger of incorporating redundancy into a 
system is that the overall system reliability could be 
‘reduced, due to the increased number of components. If the 
redundant systems are not themselves reliable, there is 
little hope of improving the reliability of the system. 
[Ref. 7] For example, Wakerly notes that constructing a 
voting component for three microprocessors in a TMR 
structure could conceivably require 14 integrated circuit 


packages constructed from the same (unreliable) technology 


By 


as the three microprocessor packages, and hence would lead 
to a system with lower reliability than that of a single 
microprocessor chip. [Ret. 8]. In addijemon, on seeeeGeboaccd 
solder connections can be one of the largest sources of 
failure. 

On the other hand, given that the redundant components 
are sufficiently reliable and the additional logic required 
is at least as reliable as the redundant modules, TMR 
provides a viable technique for improving overall system 


relvabri vey” Ty erievecalmapp! weations. [Retire 


B. TRIPLE MODULAR REDUNDANT MICROPROCESSOR DESIGN 


Having reviewed the concepts of TMR, what follows 1s a 
description of how they might be employed with three 
microprocessors. Also, having chosen to build the Testbed 
using the IDT R3081 RISC Microprocessor discussed in 
Chapters I and II, it is useful to examine what is necessary 
in constructing a board with three R3081’s operating ina 
TMR design. 

Figure 9 shows a block diagram of a simple system using 
a Single R3081 processor. The multiplexed address/data bus 
of the R3081 is demultiplexed through the use of address 
latches and data buffers/transceivers. The address bus and 


the control bus are then used by the memory controller to 
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access the memory blocks. A typical design similar to 
Figure 9 is described in detail in Ref. [9]. 

Expounding on this simple system, Figure 10 shows a 
block diagram of a TMR system using three R3081 processors. 
Figure 10 shows the additional hardware blocks necessary to 


implement majority voting of the address, data, and control 
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Figure 9. Simple R3081 Board Design. After Ref. [9]. 
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Figure 10. TMR R3081 Board Design. 
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busses and how the voted busses are then used in the 
remainder of the system. 

A significant issue when using three microprocessors in 
a TMR design is the synchronization of the processors, 
briefly described in the preceding section, Voting Issues 
‘(Section A, Subsection 2, of this chapter). The IDT R3081 
contains an output from the processor which is the System 
Reference Clock, SysClk*. This clock is used to control 
state transitions in the read buffer, write buffer, memory 
controller, and bus interface unit internal to the 
processor. As such it is used as timing reference by the 


external memory system. The frequency of this clock can be 
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either the same as the CPU cycle rate, or one-half that 
frequency. The frequency of this clock is selectable during 
the processor reset initialization. [Ref. 5] 

The R3081 does not have a guaranteed relationship 
between the input clock and the SysClk* System Reference 
Clock. However, it is possible to ensure the phase of this 
output reference clock allowing the multiple processors to 
be in the same phase. The IDT R3081 contains internal logic 
as part of its reset state machine, which forces the System 
Reference Clock, SysClk*, into a known state. [Ref. 5] Thus 
in a system uSing multiple R3081 processors with their 
System Reference Clocks operating at the same frequency as 
the CPU cycle rate, the negation of the Reset* input to the 
processors is sufficient to ensure that the System Reference 
Clocks from each processor are operating in the same phase. 
This assumes that the three processors are driven by the 
Same input clock. [Ref. 5] If the Output Reference Clocks 
are operating at one-half of the frequency of the CPU cycle 
rate, additional steps are necessary to ensure 
synchronization between the System Reference Clocks from 
multiple CPUs. 

In order to take full advantage of the TMR design to 
allow error analysis, FIFOs dedicated to each processor were 


incorporated as shown in Figure 11. The FIFOs allow the 
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Capturing of the address, control, and data bus antiormmacivon 
from each processor before it 1S passed to the majority 
voters as shown in Figure 10. 

Detailed descyiptions of the blocks shown in Figures 10 
and 11 and how they are implemented in the Testbed design 


are discussed in the next chapter. 
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Figure 11. Testbed FIFO Interface. 


IV. TMR TESTBED DESIGN 


A. OVERVIEW 


In order to observe the performance and behavior of a 
microprocessor in the presence of radiation induced single 
event upsets (SEUs), the address, data, and control busses 
must be monitored. This is because in a general purpose 
microprocessor there is not an efficient built-in mechanism 
to indicate to external devices and/or observers that an SEU 
inducedwerror has occurred. {This 1s particularly true an 
the case where one or more bits in a word of data are 
flipped. SEU induced errors may cause the processor to 
“lock up” »or “crash; which 2s detectable. bue As or. ture le 
use when trying to trouble-shoot and/or monitor the 
performance of the system. 

Monitoring of the address and data busses presents 
another problem. Without a separate entity which 1s deemed, 
or assumed, to be error free there 1s not a way to tell if 
the information that appears on the busses is error free or 
not. In addition, in the presence of radiation induced 
SEUs, the ability to correct such faults once detected 1s a 
desirable characteristic. 

In this testbed design, triple modular redundancy (TMR) 


was chosen to allow the monitoring Gimthree 1denrrmca! 
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microprocessors running identical programs. The majority 
voting used in conjunction with TMR allows detection of an 
SEU which has been manifested as a disagreement between the 
address, data, and control busses of the three processors. 
The majority voter also allows the masking of these SEU 
induced disagreements. The address, data, and control bus 
information from the two microprocessors which are in 
agreement is used to start, control, and complete each bus 
cycle. 

This assumes that identical faults, or errors, will 
not occur in two different microprocessors and produce the 
same erroneous results on their associated busses. If this 
occurred, then the majority would be in an error state. The 
same argument applies for identical faults in all three 
processors. The following sections describe the Testbed TMR 
functionality and the use of dedicated FIFOs for error 


analysis. 


‘live Testbed Operation Summary 


The testbed contains three IDT R3081 RISC 
microprocessors executing the same program and interrupt 
service routines. Each processor has a dedicated FIFO 
memory to capture the address, control, and data bus 
information during each bus cycle. The address, data, and 
control busses from the three processors are then combined 
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into single address, control, and data busses via majority 
voters. These voted busses are then used by a single 


memory/error cycle controller to access the same ROM and 


RAM. 

a. Normal (Error Free) Operation 

At the beginning of a bus cycle (Read, Burst Read, 
or Write), the address is latched from each processor’s A/D 
bus. Voting commences on the address busses while they are 


Simultaneously written to each FIFO. 

Control lines are next sampled from each processor. 
Voting commences on the control busses while they are 
Simultaneously written to each FIFO. 

Data on the A/D bus from each processor eee 
(during a Write cycle only). Data on the A/D busses from 
each processor during both Read and Write bus cycles, 
ancluding Burst Read, are written™@to each rire. 

If no error is detected (address, control, or data), 


then the current bus cycle finishes normally. 


b. Error Detection 

Errors are detected by majority voting of the 
address, control, and data busses from each processor. If 
an error is detected, the current bus cycle is allowed to 


complete before generating an interrupt. The error is 
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masked during Read and Write operations through the majority 
voter. However, the address, control, and data bus 
information associated with each processor before voting 
occurs will have been placed in each FIFO for analysis. 

Upon completion of the current cycle, an interrupt is 


generated and synchronously supplied to each processor. 


Cr Error Correction 

Upon receipt of an interrupt, each processor 
executes the same interrupt service routine. The beginning 
of this routine is signaled by initiating a write to “dummy’” 
address 1F80xxxx,;. The dummy address is recognized by the 
address decoder and a dedicated chip select is asserted. 
This chip select is in turn recognized by the memory/error 
cycle controller. The memory/error cycle controller clears 
the current interrupt and disables subsequent vote error 
interrupts while the interrupt routine exmecutes. 

The internal general purpose registers, configuration 
registers, and instruction and data caches are written toa 
reserved location in RAM. While this occurs, all internal 
information associated with each processor is written to a 
dedicated FIFO. The majority voter masks the error in the 
faulty processor and the “corrected” information, based on 
the majority of the two agreeing processors, is written to 


RAM. All internal registers and caches in each processor 
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are then filled by reading the reserved locations in RAM. 
The “faulty” processor will now have been “corrected” and 
re-synchronized with the other two processors. 

The processors Signal the end of the interrupt service 
routine by initiating another write to “dummy” address 
1F80xxxx,. The memory/error cycle controller will then re- 


enable vote error interrupts, and the next bus cycle begins. 


Cs Error Monitoring 
The operation of the Testbed is monitored via an 
outside interface system. This outside system reads the 
contents of the FIFOsS associated with each processor. 
Address, control, and data bus information from each 
processor are placed in FIFOs during non-error bus cycles. 
Upon detection of an error and interrupt handler 
execution, all internal registers and caches for each 
processor are written to the dedicated FIFOs. 
The FIFOs now contain the information necessary to 
detect which processor was in error and what the processors 


were doing at the time the error occurred. 


2 IDT R3081 Simulation 


We do not have a model of the complete R3081 RISC 
Microprocessor for simulation of the Testbed design. 


Therefore, in order to develop the concept of this design we 
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modeled the behavior of the IDT R3081 multiplexed 
address/data bus and associated control lines using the 
Verilog Hardware Description Language [Ref. 10]. The 
remaining sections of this chapter describe in detail each 
of the blocks in the Testbed design. 

In the descriptions of the blocks and in the associated 
figures, the following convention has been used. Signal and 
bus names which are bold and italicized, FORCE_A for 
example, are intended to match the same signal and bus names 
in the overall schematic in Appendix A for ease in cross 
referencing. In addition, signal and bus names which begin 
with an underscore, _ALE for example, represent signals 


which come from each of the three processors. Thus _ALE 


represents A_ALE, B_ALE, and C_ALE, for example. 


B. IDT R3081 BUS INTERFACE 


In this section, we will demonstrate that the bus 
interface simulation matches the manufacturers design 
specifications for the R3081. 

The datasheet for the IDT R3081 RISC Microprocessor 
(Ref. 11] was used in conjunction with the R3081 Hardware 
Users Manual [Ref. 5]. The single datum (word or byte) 
Read, Burst Read, and Write bus cycle timing diagrams and 


timing parameters were analyzed and used to simulate the 
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R3081 bus interface. Figures 12, 13, and 14 are the bus 


cycles obtained from these references. 
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Figure 12. IDT RO0381 Burst Read Cycle. From Ref. [9]. 
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The Diag(1l) and Diag(0) signals shown in Figures 12, 13, and 
14 were not modeled. These two pins are useful in the 
initial debug of R30xx family based systems. [Ref. 5] 
Although they are not control lines, in an actual 
implementation of the Testbed, these lines could easily be 
added as part of the control bus from each microprocessor 
and passed to the control majority voter. They are not 
needed to control the bus/memory interface. However, they 
could be used as additional status lines to detect 
differences among the three processors. 


Figure 15 shows the R3081 bus interface simulator built 
in Cadence Concept™ Schematics and the Verilog Hardware 


Description Language. The associated Verilog code is 


contained in Appendix C, Section A. The three pins on the 
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Figure 15. IDT R3081 Bus Interface Simulator. 
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Simulator labeled TRANS<2..0>, ADDR<31..0>, and DATA<31..0> 
are not pins on an actual R3081 device. These pins are 
used during simulations to force the simulator to execute a 
specified bus cycle. MTRANS<2..0> is used to specify either 
Byte Read, Word Read, Burst Read, Byte Write, or Word Write 
bus cycles. ADDR<31..0> is used to specify the address of 
the current bus cycle. If the current bus cycle specified 
1S a Burst Read, then ADDR<31..0> specifies the initial word 
address. DATA<31..0> is used to specify the data to be used 
during Write bus cycles. By using three separate simulators 
and specifying each of the above three signals separately to 
each simulator, faults can be injected into the system. 

Figures 16, 17, and 18 show the simulated address/data 
bus and control line behavior. Extra wait states; l.e., 
additional system reference clock cycles, have been added to 
each bus cycle. The extra wait states allow FIFO memories 
dedicated £0 each mm eras sO Ceca erro mene address, 
control, and data bus information. In addition, in these 
three figures the address/data bus and control lines from 
each of the three microprocessors are displayed to show they 
are synchronized with one another. 

In Figure 16, the Burst Read cycle is initiated at the 
falling edge of the _RD* and _BURST* lines from each 


microprocessor. In this particular example, the address 
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1FCO0000y 1S placed on the multiplexed address/data bus, 
_AD<31..0>, by each processor. After this address is 
latched using the _ALE signals from each processor, the 
first word of data appears on the _AD<31..0> bus after a 
short delay from the memory. The four contiguous words of 
memory read during this bus cycle are obtained by providing 
the initial address, 1FC00000, 1n this case, and strobing 
the _ADDR3 and _ADDR2 lines so that they count in binary 00, 
O01, 10, and 11. In addition, the memory controller strobes 
the RDCEN* line, which is supplied to all three 
microprocessors, four times indicating when the expected 
word from memory has been placed on the bus. The burst read 
cycle is completed at the rising edge of the _RD* and 
_BURST* signals. In the example in Figure 16 the four 
addresses read are 1FCO0000n, 1FCO0004,, 1FCO0O008:y, and 
1FCOO000Cy. In this design, the addresses 1FC0O0000, through 
1FCOxxxxy are decoded to be read only memory (ROM). The 
four words read contained the data O00000000y, O0000001,, 
000000021, and 0000000314, respectively. This correctly 
corresponds to the data which has been programmed into the 
EPROM. See Appendix C, Section I. 

In Figure 17, the Write cycle 1s initiated at the 


falling edge of the _WR* lines from each microprocessor. 
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Simulated R3081 Burst Read Cycle. 
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In this particular example, the address 00000000, is placed 
on the multiplexed address/data bus, _AD<31..0>, by each 
processor. After this address is latched using the _ALE 
Signals from each processor, the data to be written appears 
on the bus. In this example, the data to be written is 
L1l111111,;. The ACK* signal, which is returned from the 
memory controller, indicates the write has been completed. 
The write cycle is completed at the rising edge of the _WR* 
Signal. In the TMR Testbed design, addresses 00000000; 
through OOO7FFFFy correspond to random access memory 

(RAM). Therefore, in this example, 11111111, has been 
written to RAM at address 00000000,. 

In Figure 18, the single datum Word Read cycle is 
initiated at the falling edge of the _RD* lines from each 
microprocessor. In this particular example, the address 
OO000000, 1s placed on the multiplexed address/data bus, 
_AD<31..0>, by each processor. After this address is 
latched using the _ALE signals from each processor, the data 
appears on the bus after some delay. The RDCEN* line from 
the memory controller indicates that the address/data bus 
contains valid data. The read cycle is completed at the 
rising edge of the _RD* lines. In this example, 11111111, 
has been read from RAM at address O00000000;. This correctly 
corresponds with the 11111111, written to address 00000000, 
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in the previous example Write cycle description and in 


Figure 17. 


or ADDRESS/DATA BUS DEMULTIPLEXING 


The multiplexed 32-bit address/data bus of each of the 
three microprocessors is demultiplexed using the address 
latch enable, _ALE, signal [Ref. 5] from each processor. 
The schematic diagram of the demultiplexer is contained in 
Appendix B, Section A. Figure 19 is a block diagram of the 


demultiplexer. 


32-bit Address/ 
Data Bus 
(_AD<31..0>) 







32-bit Data Bus 












32-bit Address Bus 










Address/Data Bus 
Demultiplexer 






Address Latch 
Enable (_ALE) 





TESTENT° 


Figure 19. Address/Data Bus Demultiplexing. 


Fach 32-bit demultiplexer makes use of four 8-bit 
FCT373 transparent latches. [Ref. 9] During each bus cycle 
(Read, Burst Read, or Write) the address is placed on the 
_AD<31..0> bus of each processor at the beginning of the 
cycle. While the _ALE signals are HIGH, the transparent 
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latches allow the address information to pass to the 32-bit 
address voter. This allows the address information to be 
voted and passed to the memory/address decoder as soon as it 
becomes available. When the _ALE signals transition from 
HIGH to LOW, the address information is latched to the 
associated 32-bit address bus. Subsequent changes on the 
_AD<31..0> busses do not affect the state of the address 
busses until the next _ALE transition from LOW to HIGH, 
which occurs during the next bus cycle. The TESTENI* line, 
which is supplied to each demultiplexer, can be used to 
place the address bus, or output of each demultiplexer, ina 
high impedance state for testing. During normal operations, 
the TESTEN1* line should be held LOW. The schematic diagram 
of the three microprocessors, the demultiplexers, and the 


associated connections 1S contained in Appendix A. 


D. DATA BUS VOTING 


The AD<31..0> bus from each microprocessor 1S 
considered to be the data bus after the transition of the 
ALE signal from HIGH to LOW during each bus cycle. The 32- 
bit data busses from each processor are passed to a 32-bit 
majority voter/transceiver. Figure 20 is a block diagram of 


the data bus voter/transceiver. 


Sal 


During a Write cycle, the three 32-bit data busses are 
voted to produce a single 32-bit data bus. However, during 


a Read, or Burst Read, bus cycle the data read from memory 





A_AD<31..0> 
bit V / To/From Memory 
B_AD<31..0> 32-bit Voter VOTEDATA<31..0> 
Error Detector 
and Transceiver 
C_AD<31..0> DATAERR 
@ES To/From 
FORCE_A Memory 
WRDATAEN* 
FORCE_B Controller 
RODATAEN’ 
FORCE_C | 


Figure 20. Data Bus Voting. 


must be allowed to pass back to the three _AD<31..0> busses 
and on to the three microprocessors. This is accomplished 
via the RDDATAEN* and WRDATAEN* control lines from the 
memory enable controller. While the WRDATAEN* signal is 
LOW, the three data busses are voted and passed to the 
Single data bus. While the RDDATAEN* line is LOW, the data 
on the single bus which has been read from memory is allowed 
to pass back through to the three microprocessors. Voting 
of the data busses occurs only during a Write cycle and when 
WRDATAEN* is LOW. The WRDATEN* and RDDATAEN* signals are 


mutually exclusive (when one is HIGH, the other is LOW). If 
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an error is detected on one of the data busses supplied to 
the voter, the signal DATAERR goes HIGH. 

In addition, the majority voter/transceiver uses three 
input lines (FORCE_A, FORCE_B, and FORCE_C) which, when 
pulled HIGH, force the data from the respective bus through 
to the output data bus. When one of these signals is pulled 
HIGH, voting errors are not detected or signaled. These 
Signals should all be held LOW during normal operations. 

The schematic for the 32-bit majority voter/transceiver 
and associated Verilog code are contained in Appendix C, 


Section B. 


E. ADDRESS BUS VOTING 


The output of the three demultiplexers is considered to 
be the address bus associated with each processor. Once a 
bus cycle has initiated and the _ALE has transitioned from 
HIGH to LOW, the address bus holds the address information 
until the LOW to HIGH transition of _ALE during the next bus 
cycle. The address bus from each demultiplexer is passed to 
a 32-bit majority voter. This majority voter operates 
Similarly to that of the majority voter/transceiver 
described in the previous section except there is no 
associated transceiver operation or control lines. Figure 


21 is a block diagram of the address voter. If am eGrremwe 
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detected on one of the address busses supplied to the voter, 


the signal ADDRERR goes HIGH. 


CPUA_ADDR<31..0> VOTEADDR<31..0> 


CPUB_ADDR<31..0> 32-bit Voter/ 


Error Detector 


CPUC_ADDR<31..0> ADDRERR 


From 
Demultiplexers 
To Memory/Error 
Controller and Memory 





FORCE_A 


FORCE_8 


FORCE_C 


Figure 21. Address Bus Voting. 


The schematic for the 32-bit majority voter and 
associated Verilog code are contained in Appendix C, Section 


DE: 


F. CONTROL BUS VOTING 


Six control lines from each of the three processors are 
voted using an 8-bit majority voter. The six control lines 
voted are _ADDR2, _ADDR3, _RD*, _WR*, _BURST*, and _DATAEN*. 
The other two inputs to the 8-bit voter are not used and are 
Me Gh W Seles eacon ta Ol nes wane voted to uprOdugea ss iaGEee 
Glopqhene SI ie\bicee = Male g(a, eek Clerc wm louhelel< salicvepaciim apm ela(=) ele) eraions 
bus voter. This majority voter operates similarly to that 
of the majority voter/transceiver described in Section D 
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except there 1s no associated transceiver operation or 
control lines. If an error is detected on one of the 
control lines supplied to the voter, the signal CONTERR goes 


REGH:. 
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The schematic for the 8-bit majority voter and 
associated Verilog code are contained in Appendix C, Section 


e. 


G. ADDRESS DECODER 

The address decoder uses the voted address bus, 
VOTEADDR<31..17>, to generate chip selects. The address 
decoder does not wait for _ALE to begin generating the chip 


selects. This is done to achieve better performance since 


the chip select outputs will be generated earlier in the bus 
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cycle. As a side effect, however, the chip select outputs 
may tend to “glitch” as a valid address is driven. Thus, 
the Read Enables and Write Enables seen in the memory system 
must be synchronized so they are valid only when the CPUs 
are attempting a read or write transfer. This combination 
allows maximum performance because address and chip selects 
are seen early in the bus cycle but the Read and Write 
Signals are synchronized to ensure proper system operation. 


[Ref. 9] Figure 23 is a block diagram of the address 


decoder. 


From Address Voter VOTEADDR<31..0> 


To Memory 





EPROMCS" 









Address 
Decoder 


VOTEADDR<31..17> 






INTCS* 


—_ 
To Memory Controller 


Figure 23. Address Decoder. 


The schematic for the memory/address decoder and 


associated Verilog code are contained in Appendix C, Section 


EM 
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H. MEMORY/ERROR CYCLE CONTROLLER 


The memory cycle controller provides a wait-state 
generator which stalls the bus interfaces of the three 
processors so that various types and speeds of memories can 
be used. [Ref. 9] This also allows the additional wait- 
states required for the FIFO interface described later. 


Figure 24 is a block diagram of the memory/error cycle 


controller. The memory/error cycle controller 1s composed 
To Memory 
4 t 
From Control Read Write 


Voter Enables Enables 


VOTECONT<7..0> 
ADDRTOFIFO’ 
A_SYSCLK (From CPU A) 


DATATOFIFO* 
RAMCS* Z 


CONTTOFIFO* 


Memory/Error | crcowe 
Controller | 


From 
Address 
Decoder INTCS* 


ADDRERR 


EPROMCS” 


WRDATAEN’ 
From 
Majority 
Voters CONTERR 


DATAERR RDDATAEN’ 


Transceiver 





To Data Voter/ To FIFOs 


ACK’ RDCEN* BUSERROR’ VOTERRINT* 


| 


To Processors 


Figuse 24. | Memory/Eunonseyele Conrero mien: 


of three subsections. The basic RAM/ROM subsection 
generates the appropriate timing signals such as ACK*, 
RDCEN*, and BUSERROR* for operating the R3081 bus interface 
as well as the necessary write and read enables for 
accessing the RAM/ROM. The FIFO memory cycle controller 


generates the signals necessary for capturing the state of 


OW 


each processor in its dedicated FIFO at the appropriate 
times during each cycle. The error cycle controller 
monitors the vote error signals from the address, data, and 
control bus majority voters. If an error is detected, it 
generates an interrupt to the processors. It also disables 
the vote error interrupts while the interrupt handler 
routine 1s executed by the processors. The schematics for 
the memory/error cycle and memory enable controllers and 
associated Verilog code are contained in Appendix C, 


Sections F and G. 


aes RAM/ROM Cycle Controller 


The basic state machine looks for the start of a read 
or write bus cycle by looking for a negative edge of VOTRD* 
or VOTWR* from the control bus majority voter. When a bus 
cycle 1S initiated, the state machine starts a 5-bit up 
counter, counter<4..0>. The counter then increments on each 
SYSCLK* rising edge. This counter is then used as the 
timing master for all other control signals generated by the 
state machine. [Ref. 9] 

A synchronous decoder, CYCEND*, is used to tell the 
counter when the end of a memory cycle occurs. CYCEND* is 
used to synchronously reset the state machine when a 


positive edge of VOTRD* or VOTWR* is expected. Another 
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output, ENSTART*, is used to start the byte enables 
generated by the memory enable controller. [Ref. 9] 

Other outputs from the memory cycle controller include 
cycle termination inputs RDCEN*, ACK*, and BUSERROR*. Ona 
read transfer, VOTBURST* from the control bus voter and the 
current active chip select from the address decoder are used 
to determine the timing and quantity of RDCEN* signals to be 
asserted. ACK* is asserted at the end of a write cycle to 
indicate completion of the transfer. BUSERROR* is used to 


end an undecoded memory cycle. [Ref. 9] 


as FIFO Memory Cycle Controller 


In order to provide the ability to observe the status 
of each processor before, during, and after an error cycle, 
the address, control, and data busses (before the majority 
voters) from each processor are written to a dedicated FIFO 
memory. The state machine in the memory cycle controller is 
used to generate the outputs ADDRTOFIFO*, CONTTOFIFO*, 
DATATOFIFO*, and FIFOWE*. Figure 25 shows a block diagram 
of the FIFO dedicated to processor A. A similar arrangement 
is used for the FIFOs dedicated to processors B and C. The 
use of the memory cycle state machine ensures the timing of 
these signals are synchronized with the current bus cycle 


and that during a Burst Read bus operation, the address, 
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control, and data busses are written to the FIFOs four 


times. 


From CPUA Pr onn: 
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ADORTOFIFO* 
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DATATOFIFO” 


From Memory/ 
Error Controller 


Piguse 25.) °F LPO Jeontnols. 


The ADDRTOFIFO*, CONTTOFIFO*, and DATATOFIFO* outputs 
synchronously select when to provide the address bus, 
control bus, and data bus respectively to the FIFO 
associated with each processor. Since the address is the 
first bus to stabilize, ADDRTOFIFO* is asserted first. This 
1s followed by CONTTOFIFO* and then DATATOFIFO*. FIFOWE* is 
the actual write enable supplied to the three FIFOs. 

When ADDRTOFIFO* is asserted, the address bus from each 
processor is supplied to its associated FIFO and written at 


the rising edge of FIFOWE*. This is followed by CONTTOFIFO* 


and DATATOFIFO*, in turn. 
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Figures 26, 27, and 28 show the operation of these FIFO 
controls during a Burst Read, Write, and single word Read 


respectively. 


3% Error Cycle Controller 


The memory cycle controller state machine also controls 
the generation of an interrupt which is supplied to each 
processor at the detection of a vote error (ADDRERR, 
CONTERR, or DATAERR). 

The vote error interrupt, VOTERRINT*, is generated only 
at the end of the current bus cycle. This allows the 
current bus cycle to complete, with the majority voters 
masking the associated fault. In addition, allowing the bus 
cycle to complete ensures the FIFOs associated with each 
processor capture the state of the address, control, and 
data bus of each processor prior to generating an interrupt. 

It is intended that the three processors will 
synchronously receive the interrupt, and will execute the 
Same interrupt service routine. The beginning and end of 
this service routine is indicated by a write to “dummy” 
address 1F80xxxx,. This address 1S decoded by the memory 
decoder to generate the chip select INTCS*. The error cycle 


controller, upon detection of a write cycle with this chip 
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Figure 26. 
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select asserted, clears the interrupt and disables 
further vote error interrupts. The interrupt is disabled 
until the end of the interrupt routine. This is again 
Signaled by the next write to “dummy” address 1F80xxxx,. 

During the interrupt routine, it is intended that the 
processors will write all of their internal general purpose 
registers, configuration registers, and instruction and data 
caches to some selected portion of RAM. The vote error 
interrupt will have been disabled. However, errors in the 
“faulty” processor will be masked by the majority voted 
output from the other two “agreeing” processors during each 
write. Then, the interrupt routine would read back the 
selected portion of RAM and refill all of its internal 
general purpose registers, configuration registers, and 
instruction and data caches. Thus, the processor which had 
an error will have been corrected and re-synchronized with 
the other two processors. While this routine 1s executing, 
the FIFOs associated with each processor will capture all of 
the internal information of each processor for error 
analysis. 

The IDT R3081 Microprocessor Bus Interface Simulator 
module contained in Appendix A, Section A, contains a 
Simulated, abbreviated interrupt service routine which 


executes when the interrupt INT5* is asserted. Simulations 


fas 


which show the operation of the error cycle and this 
Simulated interrupt service routine are contained in Chapter 


VE 


a SYSTEM INTERFACE 


The system interface is intended to be a laptop or 
Similar system which can read the FIFOs associated with each 
microprocessor and perform some analysis. This provides for 
both real-time and post error analysis. The FIFOs selected 
allow for asynchronous writing and reading with separate 
write and read clocks which can be different frequencies. 


Figure 29 is a block diagram of the system interface. 
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From — system 
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Figure 29. System Interface. 


The testbed interface monitors the FIFO empty lines 
from processor A’s FIFO, EF_A1* and EF_A2*. As soon as they 


are both deasserted, the interface reads the FIFO. This is 
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followed by monitoring the FIFO empty lines from processor 
B‘'s FIFO, EF_B1* and EF_B2*, and reading processor B’s FIFO 
once they are both deasserted. Finally, the FIFO empty 
lines from processor C’s FIFO, EF_C1* and EF_C2*, are 
monitored and the FIFO is read once they are both 
deasserted. This process continues and the address, 
control, and data information stored in the associated FIFOs 
are obtained by the interface. The read clock is set to be 
twice the frequency of the write clock. This enables the 
interface to read the data out of the FIFOs fast enough so 
they never fill up. Figure 30 shows the timing of the 
control signals generated by the system interface. 

The interface module writes the results obtained from 
the FIFOs to a text file, TMR_trace.out. By reviewing this 
text file, the status of the processors during each bus 
cycle can be observed. Examples of this text file obtained 
Guring both normal (error free) and induced error operations 
are contained in Chapter V. 

The schematics for the system interface and associated 


Verilog code are contained in Appendix C, Section J. 
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V. SIMULATION RESULTS 


The complete design has been implemented in Cadence 
Concept™ schematics and the Verilog’ Hardware Description 


Language. Timing parameters have been obtained from actual 
device datasheets. The IDT R3081 bus/memory interface in 


this TMR design can be simulated in Cadence Logic 
Workbench™ to verify the concept of operation and test the 


voting logic, memory and error cycle controllers, as well as 
the FIFO interface. 

The following simulation results were obtained from the 
trace file generated by the simulated system interface. The 
information displayed represents what was actually read from 
eae h ar OC. 

The overall testbed schematics are contained in 
Appendix A. The Cadence supplied modules and user defined 
modules used in the schematics and the simulations are 
contained in Appendices B and C, respectively. The script 
control language (SCL) files which were used to drive the 
inputs to the Testbed schematics to obtain the following 


Simulation results are contained in Appendix D. 


no 


A. NORMAL (ERROR FREE) RESULTS 


Bus cycles 1 through 4 correspond to a Burst Read from 
EPROM addresses 1FC00000, through 1FCOOQOO0O0Cy. The data read 
corresponds to the data programmed into the Verilog EPROM 


module in Appendix C, Section I. 


CPU A CPU B CPU Ge 
Address = 1f£c00000 LESUO OOO 1£c00000 
Conero! =sOogo0v008 00000008 00000008 
Data = 00000000 00000000 00000000 
A Control = Burst Read Word 0 
B Control = Burst Read Word 0 
C Contuote= Burst Read Word, 
Address = 1f£c00000 1£c00000 1£c00000 
Control, — 00000009 00000009 00000009 
Data = svO0UCCOUL 00000001 00000001 
A Control = Burst Read Word 1 
B Control = Burst Read Word 1 
C Control = Burst Read Word 1 
Address = 1f£c00000 1EGOR00G TFEDOOSG 
Gonrro. — oO V00000a 0000000a 0000000a 
Data = "00000002 00000002 00000002 
A Control = Burst Read Word 2 
B Control = Burst Read Word 2 
C Control = Burst Read Word 2 
Address = 1f£c00000 LEEOOOOO 1£c00000 
Cont roi 00000005 0000000b 0000000b 
Data = 00000003 00000003 00000003 
A Control = Burst Read Word 3 
B Control = Burst Read Word 3 
C Control = Burst Read Word 3 


mec eee ee ee ee ee ee ee ee es ee ee ee ew = 
— ae ae Ge ee ee ee ee ee eee eee eee ee ee eee ee ee ee ee ee ee ee ee eee oe 


Bus cycles 5 through 8 correspond to a Burst Read from 


EPROM addresses 1FC000103 through 1FC0001Cy. Again the data 
read corresponds to the data programmed into the Verilog 


EPROM module aneeappendaix GG, Section 1; 
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Address = 
Conrtuel.= 
Data = 
REGors eo) 
B Control 
Oe Sle lghacaeds 


—e ee em ee rc ee em ec ec wc ee ee ee ee ee ee ee ee ee ee 
—_ oe eee ce cm ww ec ee ee ee ee ee we ee eee ee ee ee ee ee ee ee ee ee ee 


Address = 
Cenc rok== 
Data = 
AVContere | 
B Ceonere: 
G Come ro. 


LECOOOLO 
00000008 
00000004 
= Burst Read 
= Burst Read 
= Burst Read 


FECOOO LO 
00000009 
00000005 
= Burst Read 
= Burst Read 
= Burst Read 


TECOUGLO 

00000008 

00000004 
Word 0 
Word 0 


TteoU00LO 

00000009 

00000005 
Wore 1 


1£c00010 
00000008 
00000004 


1£cO00L0 
00000009 
00000005 


cece wr crm mre ee ere ec ew cw ee we ee ee 
ec ce ee cc ce cr ce ce ec cc ec ee ee ee ee ee ee ee ee ee wee ee eee 


Address 
Comerel 
Data = 
AnCOneEroL 
BxCOpEreL 
GC -Converel 


bFeou0o1 0 
0000000a 
00000006 
= Burst Read 
= Burst Read 
= Burst Read 


LECOOOLO 

0000000a 

00000006 
Word 2 
Word 2 


TECOCO LO 
0000000a 
00000006 


mcm cece ce ee ce ee cr ee ce ee ec ee ec ee ee ee ee ee ee we we we ew = 
emer crc cr cre mre crt rm mee ee ee ee ee ee ee ee ee ee ee eee ee ie oe 


Address = 
Centro. — 
Data = 
PiCont ror 
By Centeire | 
C Cone ne. 


TECOUCOLO 
O000000b 
00000007 
= Burst Read 
= Burst Read 
= Burst Read 


LESCOOOLO 

0000000b 

00000007 
Word 3 


1£c00010 
0000000b 
00000007 


cmc ce me mt ce we ce mc ew ce ww we ww ww ww we ee ee ee 
mec cme ce ce ce cece mee ce eg ec ee ce ce ec ee ee ee ce ce ee ee ee ee ee ee ee ee ee ee eee 


Bus cycles 9 


cycles to RAM addresses 00000000uz, 


OQO00000Cz. 


G. 


Ge 


eis 


Address = 
Contre! = 
Data = 
ABESnero:. 
B Control 
C rConere! 


threvugh 12 ‘correspond to four Wmwate bus 


00000000 
00000034 
dE aaa alee 


ee ee ec ee we we we we we ww we we we ee we we ww we sw ws we ee ae ie i 
cme cee cme ccc cee ee ee reece mee cece ee cc ce ee ee ee ee eo i 


Address 
COnEroO! 
Data 

ABCOnErO. 
BeCent ret 
C Conese. 


iow it 


emer mm em mee ce ce ee ew we ee we ee ew i i i i i 


mete ccc ce ee ee ee ee ee eee ie ieee ee 


Address = 
Cenerols— 
Data = 
A GOntroL 
B Control 
C¥Conere! 


cmc cece cw ce ee ee ee ee ee ee ee 


00000000 
00000036 
S53 5555 56 
= Write 


000000044, 
00000000 00000000 
00000034 00000034 
La ee Lee 
00000000 00000000 
00000035 00000035 
22222222 Boceeee 
00000000 00000000 
00000036 00000036 
33335556 33333356 


om 


cme ee ce ee ew es we we ws we we ei iis es es SS es 
ce ee eee ee ee 


000000084, 


and 


oe 


Address = 
Control = 
Data = 
A Contre! 
B- Control 
CrCene ro! 


00000000 
OOOO s7 
44444444 


Write 


00000000 
00000037 
44444444 


00000000 
00000037 
44444444 


me cee mc mc cee cr mc me ce we me eee ee ee ee eee ee eee ee 
cece cc cr ce ce cc ce cc ce cc cc ce ce ee ce ce ee ee ee ee ee ee ee ee eee ee ee eee eee 


Bus cycle a2 


cycle from RAM address QOOQOQO0O0O0O0,. 


corresponds to a single word Read bus 


that was written during cycle 9. 


Se 


Address 
Contre! 
Data 

A CGoneol 
B Control 
CG; @oneou 


00000000 
00000018 
Lee 


00000000 
00000018 
JAR 


00000000 
00000018 
Pee eee 


The data read is the same 


mec cme ec cm ce ce eee ete ew ce rc ce ee ee ie i 
mr ec cee ee emcee eee ce ecm ce cme ee eee ce ee ee eee ee ee ee ee 


Bus cycles 14 through 17 correspond to a Burst Read 


from RAM addresses 00000000, through OQO0OQO0O000C,. 


The data 


read from RAM is the same that was written during cycles 9 


EDROuUCiniewe7 


14. 


is 


oe 


Address = 
Gontzol = 
Data = 
A Control 
BeeContze. 
CFeCon sane! 


00000000 
00000008 
Neale ale deed 
= Burst Read 
= Burst Read 
= Burst Read 


00000000 

00000008 

Diet 
Word 0 


00000000 
00000008 
Lael 


em ccc cr cr cr cr cr cc cr wc et ee ee eee ee 
SS ded 


Address 
Control 
Data 

A Control 
B Control 
GC Comene 


00000000 
00000009 
Zeec22eZ 
= Burst Read 
= Burst Read 
= Burst Read 


00000000 

00000009 

22222228 
Word 1 


00000000 
00000009 
Zeeeeeee 


em cc cr cr ec ct ee ees se i i i = = 
meme eee creme ce eee eee ee cc eee ee ce ce ce ee ee ee eee ee ee es ee ee ee eee 


Address 
Conene i. 
Data 

A “Cone rol 
B Centro 
C Conerot 


= Burst Read 
= Burst Read 
= Burst Read 


00000000 

0000000a 

33333355 
Word 2 
Word 2 


00000000 
0000000a 
33353852 


ee ccc ee eee ce ec mcm cw ee ee ewe ee i es ee iia i 
emcee ec eee tee ec ce ce ce ce ee ee ce ee eee ee ee ce ee ee 
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es Address = 00000000 00000000 00000000 
Control, = 00000005 0000000b 0000000b 
Data = 44444444 44444444 44444444 
A Control = Burst Read Word 3 


B Control = Burst Read Word 3 
C Control = Burst Read Word 3 


— cm ee cr crm crm cr mw we ww ew wwe eee ee eee ee ee ee ee 
ce ce cc cr cr cc cr cr cm we cme ee ee ee ee ee ee eee eee 


Bs INJECTED ERROR RESULTS 


Bus cycles 1 through 4 correspond to a Burst Read from 
EPROM addresses 1FC00000, through 1FCO000Cy,. The data read 
corresponds to the data programmed into the Verilog’ EPROM 


module in Appendix C, Section I. 


CPUCA CPU B CPU C 
le Address = 1f£c00000 LECOUOCOD 1£c00000 
Control = 00000002 00000008 00000008 
Data = 00000000 00000000 00000000 
A Control = Burst Read Word 0 
B Control = Burst Read Word 0 
C Control = Burst Read Word 0 
Zs Address = 1f£c00000 TiEc00008 1£c00000 
Contre! = 00000009 00000009 00000009 
Data = (§C000002 00000001 00000001 
A Control = Burst Read Word 1 
B Control = Burst Read Word 1 
C Control = Burst Read Word 1 
ae Address = 1f£c00000 1£c00000 1£cO00000 
Control = 0000000a 0000000a 0000000a 
Data = 00CO0DU02 00000002 00000002 
A Control = Burst Read Word 2 
B Control = Burst Read Word 2 
© €ontrol = Burst Read Word 2 
4. Address = 1f£c00000 LecoCgo oe 1fE00006 
Control = 00000005 0000000b 0000000b 
Data = C0000 08 00000003 00000003 
A Control = Burst Read Word 3 
B Control = Burst Read Word 3 
C Control = Burst Read Word 3 


emcee ee we ee ee ee iis se ae ees eS 


cme ce rec cece cc ce ee ee es ee ee we ee ee ee ee eee ee eee eee ee 


Cycle 5 is a Write bus cycle to RAM address 00000000; 


where there is an error in the address of processor A. 
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San Address = 00000100 00000000 00000000 
Control = 00000034 00000034 00000034 
Data = Lia ee tl Pe 


A- Control “= Wrice 
BControl =“ Write 
CVeCOnero..— 


meee ee ee ee ee we es ew es ee i i ie = 
ae ocmme cme me ww ww ew ws i ee em 6 se = 


Cycles 6 through 11 are the six cycles of Bae Simulated 
interrupt service routine. The differences between the 
“internal” information of the three processors that caused 
the error can be observed. These differences do not 


themselves cause additional vote error interrupts because 


the interrupt routines are initiated by a write to “dummy” 


address 1F80xxxx,. 


is read back from RAM, the 


On 


Address 
Conerol 
Data 

A Contre! 
B Contre! 
C -Control 


em ee ee ee ww eee ee ewe we ee ee 
ce eee ee eee ee ee ee ee ee ee eee ee ee ei ee eee i 


Address 
Control 
Data 

A Cenezol 
B Contre! 
C Gomenedl 


Address 


B Conereol 
C’ Control 


Address = 
Control. = 
Data = 
A Control 
B Gentrol 
Cy Comere | 


However, 


1£800000 
00000034 
BELT E ieee 


00070000 
00000034 
00000100 
= Write 


when the 


“corrected” 


1£800000 
00000034 
Pree oie 


00070000 
00000034 
00000000 


00070000 
00000035 
eee eee 


00070000 
00000018 
00000000 
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Vinee rna. | 


INCOrmmartion. LS reads 


1£800000 
00000034 
CLEP 


00070000 
00000034 
00000000 


00070000 
00000035 
dd ee 


00070000 
00000018 
00000000 


informatvem 


Os. 


Address = 
COnEroO.W.= 
Data = 
ATContLow 
BControL 
Cc Control 


— rc mcr crc me ee mc em te ee we ee ee ee ee i 
ccc ccc ccm eer cre cr cr cere ree cm cc cr ce ee ee ee ee ee ee eee 


Address = 
Genero! = 
Data = 
A Conerol 
Become ror 
C control 


00070000 
00000019 


TESOCOUO 
00000034 
Pet irr rs 
= Write 


00070000 
00000019 
Pe 


1£800000 
00000034 
EE EEt tit 


00070000 
00000019 
Aa 


1£800000 
00000034 
Ett lion 


— ee mee we ww ww ce ee we we ww ww we ww ewe ee ee a 
— ccc ec cm cm mm mt ce ee me me ee ee ee eee ee ee ee ee eee ee 


Cycle 12 is a Write bus cycle to RAM address 00000004; 
where there 1s an error in the address of processor B. 
Cycles 13 through 18 are the simulated interrupt service 


routine initiated by the three processors. 


ae. Address = 00000000 01000000 00000000 
Control = 00C0CGsS 00000035 00000035 
Data = 222 220 2E222200 2Ee22220 
AVGonerol = Werle 
B Control = Write 
C Control = Write 

t32 Address = 1£800000 1£800000 1£800000 
Congrol = 00000034 00000034 00000034 
Data == frre ren frre as fLrirrie 
AP EOneErol. = Wiite 
B Control = Write 
C Control = write 

dee Address = 00070000 00070000 00070000 
Control = "00000034 00000034 00000034 
Data = (°C 0Uue04 01000004 00000005 
A Control = Write 
B Control = Write 
C Control -=-Write 

12: Address = 00070000 00070000 00070000 
Contrel = “00UCG035 00000035 OOCOO0S> 
Data = 227220022 22222 a2 22222227 
PeCOnErol = Wiiee 
B Control = Write 
C Contos =-Wrice 

16. Address = 00070000 00070000 00070000 
Control = OCocr0rs 00000018 00000018 
Data = 00000004 00000004 00000004 
A Control = Read 
B Control = Read 
C Controle =sxcacd 


cme we ce ww es te ee mw ww ww ws we ii i ew eS SS 
—_——_——<— eee eee ee ec ce ee ce ee ee ee ee ee ie ee es 


Lee 


Address = 
Control = 
Data = 
AeCOneEr ou 
EB, CoOmero. 
C Contre] 


ce cc re ee ee ee ee eee es es es es ew we we we we eis 
eee eee eee ee ee eee ee eee ee ee ee ee ee ee es es ee ee ee ee ee ee ee ee ee ee 


Address 
Cont ro. 
Data 

A. Control 
B Concrol 
C Control 


meme cm me ew se ee ew ew ee ee ee ee ee ee ee ee ee i 
cme cmc cc cc cc ce ce ce ce ce ce ce ce cc ce ce ce ec ee ee ee ee ee ee ee ee ee ee 


00070000 
00000019 
2E2CZ Lae 
= Read 


1£800000 
00000034 
Piper ere 


= Write 


00070000 
00000019 
Z2e22222 


1£800000 
00000034 
Piitieee 


00070000 
00000019 
Cece leee 


1£800000 
00000034 
Pri poe ee 


Cycle 19 1s a Write bus cycle to RAM address 00000008; 


where there 1S an error in the data of processor C. 


Cycles 


20 through 25 are the simulated interrupt service routine 


initiated bysethe thweemsroecessoers - 


EOE. 


20% 


oe 


aoe 


Zoe 


Address = 
Control = 
Data = 
Aeeontrol 
Beeonero.) 
. (Coletepatenlh 


mec me ee mc cw ew ew ew we ws ee i es es es i = 
msm sme ce ce ccc cm ee ee ee we ee ee ee es ee eee ee = 


Address = 
Contxsol = 
Data = 
& COnt rol 
Becontrol 
GBeont rol 


— ee es ee ee ee ee ee ee ee ee es es ees eee ee ee ee eee ee eee ee 
cm eee eee ee ee ee ee ee ee ee ee ee ee ee ee ee ee eee eee 


Address 
Contvet 
Data 

PmeCme ro. 
B Control 
CReConc rol 


Ho ou 


ce ee ec ce ee ee es ws is es i i i 
ce ee eee ce ec cc ce ee ce ce we we 


Address = 
Control = 
Data = 
beeonterol 
Beeontrol 
Gweomere | 


mmc cc ec cc ce cw ce cw ce ww cw we wc ee es ee ee i 
Oe 


Address 
Control 
Data 

AV CGonero ll 
B Contro | 
@ entre] 


mmm ww ee ee ee wee ee ws es es es wes es es wi i i 
ee cm ce em ee ee we ee ee ee we ie i 


00000000 
00000036 
33333255 
= Write 


00070000 
00000034 
00000008 


00070000 
00000035 
33333555 


00070000 
00000018 
00000008 
= Read 
Read 


00000000 
00000036 
33333685 


1£800000 
00000034 
EELLLIe: 


00070000 
00000034 
00000008 


00070000 
00000035 
333335386 


00070000 
00000018 
00000008 


00000000 
00000036 
63555057) 


1£800000 
00000034 
Pert ite 


00070000 
00000034 
00000008 


00070000 
00000035 
35 355550) 


00070000 
00000018 
00000008 


24. Address = 00070000 00070000 00070000 
Control = 00000019 00000019 00000019 
Data = 35S 5500 S 53556505 S55 55055 
A Control = Read 
B Control = Read 
C Control = Read 

25 Address = 1f£800000 1£800000 LESEO00 
Control = 00000034 00000034 00000034 
Data = trrrEerer ELitiies Pitt ieee 
AVCONCLOL 7 Write 
BControl = Write 
G-Control = Write 


— ee me ee ee em cw ee we ew ee we ee we ee we eee wee ee 
— ec cece cece cc ccc crc ee ce ee ee ec cc ce ee ee eee ee ee eee 


Cycle 26 1s a Write bus cycle to RAM address OQOOOOQOOA, 


where there are multiple errors in the data of all three 


processors. Cycles 27 through 32 are the interrupt service 
BOWUEINE . 

OM Address = 00000000 00000000 00000000 
Comurol = 00000037 00000037 00000037 
Data =~ £4444444 44a44444 44444447 
A Control = Write 
Becontrol = Write 
CHCOneErol Y= Write 

Ca Address = 1f£800000 1£800000 1£800000 
Centre! = 00000054 00000034 00000034 
Data Speer er ef frifriree frreiiere 
A Control = Write 
B Control = Write 
GSCGCneErol«— Write 

Zoe Address = 00070000 00070000 00070000 
GoneErole= GOO0CUS4 00000034 00000034 
Data = 0000000c 0000000c 0000000c 
A Control = Write 
By Ceomaerel = Weite 
GtGont rol — Wiewee 

29. Address = 00070000 00070000 00070000 
Contre. = JOU0U0G>S 00000035 00000035 
Data = f£4444444 44a44444 44444447 
A Control = WEree 
BeControl.= Weise 
CyGOnerol =) Wieite 

60. Address = 00070000 00070000 00070000 
Conte, = 00 00UGniS 00000018 00000018 
Data = HOO OBOE 0000000c 0000000c 
A Control = Read 
B Control = Read 
C Control = Read 


mem we ce we wwe ew we ew ee ee ee ee ie iii ee 
ec cc ce ec ce ce cee ce ee ce ee ee ee ee ieee 


ae 


oe 


Address 
Cont ro ! 
Data 

BR COnNterOL 
BiGentro! 
CeConerol 


Ho ou 


eee cr cr cc cee ecm mmr mrs me me cr meme ce cece cme cree ce ce ce ce ce ce ee eee ee eee ee ee ee = 
me emcee ccc mm cee ee ee ee ee es ee ee eee ee ee ee ee 


Address 
Control 
Data 


A COnErolL = 


B Control 
CoCOnNere! 


00070000 
00000019 
44444444 
= Read 
= Read 


1£800000 
00000034 
Pitre eere 


00070000 
00000019 
44444444 


1£800000 
00000034 
Ertl. 


00070000 
00000019 
44444444 


1£800000 
00000034 
BEE Ee ee 


ome ccc crew cc rc cr cc ww wc ww ww we ww ww we ws ee ee we we 
SS LLL LLL LL, 


Cycles 33 through 36 are a Burst Read from RAM 


addresses 000000004, O0000004,, QOOQOQ00008y, and OQO00000C,. 


The data read from RAM is the data which was “corrected” by 


the majority voter when written during cycles 5, 12, 19, and 
26. This example shows the successful completion of the 
four Write evyeles (5, 12, 19, and 26) which comtained 
Cea S:. 
33. Address = 00000000 00000000 00000000 
Control) = 00000008 00000008 00000008 
Data aa eee eee desi lee 
A Control = Burst Read Word 0 
B Control = Burst Read Word 0 
C Control = Burst Read Word 0 
se Address = 00000000 00000000 00000000 
Control =—000000U? 00000009 00000009 
Data = 22222222 22222228 DONO} IRONS: 
A Control = Burst Read Word 1 
B Control = Burst Read Word 1 
C Control = Burst Read Word 1 
35% Address = 00000000 00000000 00000000 
Control =" 00000004 0000000a 0000000a 
Data =o oo 33 36 3360 33333328 
A Control = Burst Read Word 2 
B Control = Burst Read Word 2 
CeCcontsol = Burst Read Word 2 
a6. Address = 00000000 00000000 00000000 
Contre. = OCO000000b 0000000b 0000000b 
Data Aly sla /alyaly sys gal 44444444 44444444 
A Control = Burst Read Word 3 
B Control = Burst Read Word 3 
C Control = Burst Read Word 3 


emt mcm rm ew we wc ce ce we ee es ee ee i ie 
ete cpm mc ccc cre ee ce ce cc cc cc cece ce ee ee ee ee eee ie a 


Cycle 37 1s a Write cycle to RAM address 00004000, 
where processor B has incorrectly initiated a burst read 


from 000040004. Cycles 38 through 43 are the interrupt 


routine. 

ce Address = 00004000 00004000 00004000 
Control — Ul000us4 00000008 00000034 
Daca = FS3I787878 See 78787878 
A Control = Write 
B Control = Burst Read Word 0 
C Control = i Write 

3ec Address = 1£800000 1£800000 1£800000 
Control = 00000034 00000034 00000034 
Data =) he bi rer f teeter eee EP hee ioe © 
P COneErON = /WELee 
BeConzirol = Write 
CaAConerol, ="Write 

39), Address = 00070000 00070000 00070000 
Centrol = 00000034 00000034 00000034 
Data = 0O0C04000 00004000 00004000 
AO Gonerol: = Wrece 
B Control = Write 
C Gontrol = Write 

40. Address = 00070000 00070000 00070000 
Conerol = 0O00C0ssS 00000035 00000035 
Data = J87 57376 78787878 Fo7Tolsic 
PT Control = Write 
B Control = Write 
Cx1Ceonerol =) Write 

alia Address = 00070000 00070000 00070000 
€ConeEroel = TO0GD0 1s 00000018 00000018 
Data = )0004000 00004000 00004000 
A Control = Read 
B Control = Read 
C Control = Read 

a7 Address = 00070000 00070000 00070000 
Conerol — S000G0ls 00000019 00000019 
Data = 78707578 78787878 78787878 
A Control = Read 
B Control = Read 
CG Control = Read 

43. Address = 12800000 1£800000 1£800000 
Gonerel: = VO000Cs4 00000034 00000034 
Data = (Eeet ot © Pererer fk fGEEr eee 
AneConerol. = Write 
B Control = Write 
GC Gentrol = Wrirce 


emcee ccm emcee ee ee wee we ee ieee 
— ee eee ee ee ee ee ee eee i eee 


— ee ee ee ee ee ee 


Cycle 44 1s a single word Read from RAM address 


00004000;. The data read is the correct data written during 


EVCl ees. 
44. Address = 00004000 00004000 00004000 
Gonerol =.0C0000018 00000018 00000018 
Data = (0767675 78787875 18 /87678 


A Control = Read 
B Control = Read 
CSConero i = 
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VI. CONCLUSION 


With the rapidly declining radiation hardened device 
market and high prices of such devices when compared to COTS 
alternatives, a tool is desired that will allow the 
observance and analysis of COTS processors operating ina 
radiation environment. Additional reasons to move towards 
COTS devices are significant advantages in efficiency, 
performance, and software availability. 

One of the primary disadvantages of COTS devices is 
their susceptibility to single event upsets. Triple Modular 
Redundancy (TMR) 1S viewed as one of many possible 
alternatives to provide some protection from SEUs in COTS 
devices. 

The danger of incorporating redundancy into a system is 
that the overall system reliability could be reduced, due to 
the increased number of components. If the redundant 
systems are not themselves reliable, there is little hope of 
improving the reliability of the system. 

The TMR Testbed design 1S not intended as a design for 
space flight operations. Nor is it intended as a guaranteed 
method of improving the performance of the R3081 processors 
in the presence of radiation induced single event upsets. 


The design herein is intended for ground based operational 


he 


testing of the voting logic and any software algorithms run 
within the processors themselves. It 1s assumed that the 
board can be constructed in such away that all of the 
hardware, other than the microprocessors, can be adequately 
shielded during laboratory radiation testing. In addition, 
it 1s realized that a fault which occurs in two of the 
processors at the same time, and which is manifested as the 
Same bit being flipped on the address, control, or data bus, 
cannot be detected. In the event this error occurs, the two 
processors which are actually “faulty” will agree and become 
the majority when passed to the majority voters. 

In the Testbed design, TMR provides the opportunity to 
monitor the three processors and in the event of an error, 
determine which processor was in error and what the 


processor was doing at the time the error occurred. 
The Cadence/Verilog® design will allow simulation of 


the concept, verification of timing signals, and flexibility 
in reconfiguration of the design. Through simulation, the 
use of the bus/memory interface from three COTS 
microprocessors in a TMR design to monitor the system for 
errors has been realized. The actual board design could be 
constructed and used to test voting logic hardware and 
software algorithms ina laboratory environment in the 


presence of radiation induced SEUS or injected faults. 


OZ 


The use of the dedicated FIFO memories allows both real 
time and post-error analysis of the state of the three 
microprocessors. Thus, the tool will provide the capability 
to analyze the success or failure of attempts to improve the 
performance of COTS microprocessors in this environment, 


prior to their use in designs intended for actual space 


applications. 
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APPENDIX A. TMR TESTBED DESIGN SCHEMATICS 
This appendix contains the entire schematic for the TMR 
Testbed built using Cadence Concept™ schematic tools and 
the Verilog” Hardware Description Language. 
Enlarged views of each block in the following 
schematics and associated Verilog’ code, when applicable, 


are contained Appendices B and C. 
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Figure 33. 
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Figure 36. TMR Testbed Schematic (6 of 11) 
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Figure 37. TMR Testbed Schematic (7 of 11). 


102 





= ; [ ——— 
NVM 
(_]OxM7 4H 4 2u}——_ a 
Oxy 
NIM) 
NaY eee 
xu.) 
LXMp 5 if 
qa) SC 
TNGNS 
*xCU Jd *TO" 4a 
a Excise 
l 
rz 
Se 
gc 
22 
Ge 
Ge 


OjTS BIKAT 
yrSeteez2100 





diz 





*OYO4T 4 Ss 





NIN 
NON 
INGNS 


el 


& 
~- 


O4II BIKAT 
vIseczzz1al 


ded 


* 14S 349 


*HIDSAS YU 


*IMOJIT 4 


IN\dN 11d 


<@°°TEONIVOJIS 


TR Testbed senemarre (co Clete 


PaciiiGe mss. 


OS 


*OuO JI 4 


*30 2 





* 13534 


*KMIDSAS UY 


* 3MOAI 


*eg~ 39 *T@~ 43 


INdAN T1Md 


O414 GIKAT 
¢1s¢ce2z101 


O13 ETX2T 
¥1S¢zez2zi01 





dr df 


‘O° *TEONTEO4I4 


( 0°26 Esai 


TMR Testbed Schematic 


Paennree 93,9 5 


104 


*TYOJT 4 


*307 9 





INGND 


KCD7 43 
IN\dN Find 





O14 BYXAT 
wl1sec2z2i0r 





O414 BIXAT 
wIScecZ410L 


dG@r dt 


<@ 


* LISSY 


*WTSAS VU 


*AMOJT 3 


INdM Vid 


Ve NT oesT 3 


TMR Testbed Schematic (10 of 11). 


Figure 40. 


LOS 


*OYUO4I4 


X30" 2 


*3078 


*3I07" 


Aa W0d 


 Te7os0s874 
<@° “Te&7ea-O4T4 
 le7esoats 


AIVAAGILNI 





J) 


] 


4 


XG GAS 


*TO7 AF 


*ca 44 


*TS™ 44 


XCU™ 44 


*TO 44 


(Osteen 


TMR Testbed Schematic 


Figure 41. 


106 


APPENDIX B. CADENCE SUPPLIED MODULES 
This appendix contains the TMR Testbed schematic 
modules, which were supplied in the Cadence Concept™ 


Schematic l1brartes. 


A. A74FCT373 TRANSPARENT LATCH 


This part was used to build the address demultiplexer. 
The body diagram of the address demultiplexer and its 


schematic follow. 


O) 2 aS a! 

ES 
Ex x Oon< 7 > 
bec 6- oO < b> 
ECS Or <a 
D <4> Q <4> 
Des 3? Oo” <s> 
Dice or <a> 
Be "<A ance 
Ie Ke Oe <)> 





Figure 42. A74FCT373 Transparent Latch. 
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Figure 43. Address Demultiplexer. 
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Figure 44. Address Demultiplexer Schematic. 
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B. IDT71256 32K X 8 SRAM 







[Ey Leas 
32KxS 


WE CSO 


Figure 45. IDT71256 SRAM. 


Cc. IDT72225LA 1K X 18 FIFO 


IOT7222S5LA 
1KX13 FIFO 





Pigure.46.  IDT/222552, 7 230- 


OS 





APPENDIX C. USER DEFINED VERILOG® MODULES 


This appendix contains the custom modules built using 


the Verilog’ Hardware Description Language and the part body 


diagrams built using the Cadence Concept™ schematic tools. 


A. IDT R3081 RISC MICROPROCESSOR BUS SIMULATOR 


Roel 


AO< 31. .@> Able Si... O> 


ROOR2 AQOR?2 
CURR _TRANS< 2. . &> TRANSS. 2. . > 
AOORESSS 31. . @> AOOR<31..@> ADORS ADORS 
DATAC 31. .O>q—-J OATA<31. . @> 





ALE ALE 
RESET_N GJ RESET x ROX RO_N 


ACK_N oJ ACKx WRbo WRN 
ROCEN_No_J| ROCENK BURSTxLS BURST_N 
INTS_N GJ INTSx OATAENx DATAEN_N 


SYSCLKx Srscuk oN 


Figure 47. R3081 Microprocessor Bus Simulator. 


ff RRR EEK KR KN KH RO HR KR RR RAK RR AS AOR RK, ROR ORR RR NRE I NE ae 


er ike” 6300 lew 


een 

//* Description: Verilog behavioral file for simulating the 

7 aa multiplexed address/data bus of a IDT RV3081. 

fale 

//* Reference: (1) IDT79R3081 RISController with FPA Data Sheet 
a (2) R3081 Family Hardware User’s Guide 

ye 


7, DULROY: we OChn Co Payne, Jr. 
//* Date: 10/24/98 


[ [RRR RERRERE ERE ERK KEK RR KR KKK K RK EK RRR AK EK ASX ERR a ee ee ee 


‘timescale 1 ns /1 ps 
‘define NONE 0 


‘define READ BYTE 1 
‘define READ WORD 2 


oa 


‘define READ_BURST 3 
‘define WRITE_BYTE 4 
‘define WRITE_WORD 5 
‘define HIGH 
‘define LOW 

‘define TRUE 

‘define FALSE 


Se SS 


ff RESALE EEE EER A ER ek EE RRR ee eee he Ke ee ke ee ee eee 


/7* Medule—  r3s0st 


Lge 

//* Description: Verilog behavioral module for simulating the 

Si multiplexed address/data bus and control lines of the IDT R3081. 
fae This module drives the R3081 block in the Cadence Concept 

Lefie schematic. 

Lae NOTE: Module name must match the Cadence Concept block name, but 
jes must be in lower case. Signal names of inout, input, and output 
ay ba lines and size (or bus width) must match the signal names in the 
a Cadence Concept block. 

Lae 

//* Reference: (1) IDT79R3081 RISController with FPA Data Sheet 

Vafac (2) R3081 Family Hardware User’s Guide 


[Lf RRR REKRREK ERR ERERKER EERE KERR RAE K EK REE APRA RK RR eT ARR ee 


module r3081 (SYSCLK-N, RD_N, WR_N,-AD? ADDRS, ABDRZ, ALE, 
DATAEN Nae eURST_N, RDGCENSN ACh Neer cond N, 
INDE5S_N, @CURR TRANS, ADDRESS.) DATA) 


//* RV3081 @ 20MHz rise/fall time parameters (min,typ,max) 
parameter 
EJomin 
C/ieeyp 
t7_max 
ee mi 
EDeeeyD 
t8_max 
t9 min 
ESL c Vp 
t9_max 
eae 
Gee 
tli max 
143i 
Ee eee 
t14_ max 
dS ee er 
Elo by 
til$ "max 
62min 
floc yo 
fom masc 
Gee man 
eo tip 
Gees oma 
G9 2mam 
SEO 
t19_max 


~ 


mn 


ee tt) =evalid frompesyvsCLkeN Lising 


~» 


~ 


//* t8 = Asserted from SYSCLK_N rising 


~ 


~ 


(jac 


™ 


Negated from SYSCLK_N falling 


PHO OPRN DOMNN © 


So. Se SO Owe Ww Oe © OF ~) Os 


So /7/* tid = Asserted trom SYSCumaN falling 


: j// pete = Driven from. Si oChkKeN seus@ne 


25.77 tle = Negaledmicom or se bheN eta | ling 


' j/7* tle =. Valid trom sv SCL AN 


(/* E18 = tei ceate. from SYSCLK Ngee! Ling 


52/7" €l9 = SYSCERAN talling tesdata valida 


tot Wo ub ub oud th ot ub ot tou Wd ot uw ot wen 


ee 


//* Module input and output lines 
OUCPUCrs ooh... 
RD Ny 
WR_N; 
inoue. (320 heAb- 
output ADDR3, 
ADDR2, 
ALE, 
DATAEN-N,; 
BURST _N.; 
input RDCEN_N, 
ACK_N, 
REESE ON, 
LNTS NN; 


//* These three inputs are not actual pins on an IDT R3081. They 
//* are used as interface pins to the bus simulator to command the 
//* bus to initiate a read, burst read, or a write. 

input [2:0] CURR_TRANS; 

input [31-0] ADDRESS> 

inputal 31. Olmparte. 


reg. Si ScCLKan; 
wire RD_N, ADDR3, ADDR2, ALE, DATAEN_N, BURST_N; 


//* Internal variables (line enables) 
reg RD_N_enable; 

reg WR_N_enable; 

reg AD_enable; 

reg ADDR3_enable; 

reg ADDR2_enable; 

reg ALE_enable; 

reg DATAEN_N_enable; 
reg BURST_N_enable; 

reg [31:0] busValue; 
reg startCycle; 

reg bootCycle; 

reg [31:0] saveAddress; 
reg [31:0] saveData; 


//* R3081 Multiplexed Address/Data Bus (32 bit) 
busDriver + (Elomi tl 4 eyo, cL4 max, 
ELCs bls (eyo, &vominas 
tLomain, 61S tyo, Bleemax) 
ADBus (AD, busValue, AD_enable) ; 


//* R3081 Output Line RD_N Driver 
activeLowLineDriver 
# (elo min, tee ert nek, ©) oman, CCV, Co amon 
RDLine(RD_N, RD_N_enable) ; 


//* R3081 Output Line WR_N Driver 
activeLowLineDriver 
HC loUMmin, ©) o typ, CLS -mas, C/2miny, 67 eyo ices) 
WRLine(WR_N, WR_N_enable) ; 


ie 


//* R3081 Output Line ADDR3 Driver 
activeHighLineDriver 
P(E l6sman, tio ct yp, tio man, G.OsmiImM, tO typ ub Lo. max) 
ADDR3Line(ADDR3, ADDR3_enable) ; 


//* R3081 Output Line ADDR2 Driver 
activeHighLineDriver 
Pit ie min, £16. fyp, tio max, tloomin it l6ltvp, 2 v6 mace 
ADDR2Line(ADDR2, ADDR2_enable) ; 


J/7* 23081. Outper Line ALE .Drives 
activeHighLineDriver 
#(ESlmin € Se. eve. ES max Eom. £9 ey. Ey sna) 
ALELine (ALE, ALE_enable); 


//* R3081 Output Line DATAEN_N Driver 
activeLowLineDriver 
#{(ti5 min, t15eeyp, §lsamax7 tll ominm ec hms ee amass 
DATAENLine(DATAEN_N, DATAEN_N_enable) ; 


//* R3081 Output Line BURST_N Driver 
activeLowLineDriver 
CLS Ming € lS 2bye eS ase, © fd te met pene) 
BURSTLine(BURST_N, BURST_N_enable) ; 


//* Initialize internal variables 


initial 

begin 
Srseuk N= O- 
RD_N enable = ‘LOW; 
WR_N_enable = ‘LOW; 
AD enable = ‘LOW; 
ADDR3_enable = ‘LOW; 
ADDR2_enable = ‘LOW; 
ALE_enable = ‘LOW; 
DATAEN_N_enable = ‘LOW; 
BURST_N_enable = ‘LOw; 
busValue = ‘bz; 
startCycle = ‘FALSE; 
saveAddress = ‘bz; 
saveData = ‘bz; 


end 


//* Control System Reference Clock 
always 
#25 SYSCLK_N = ~ SYSCLEK_N; 


//* Watch for change in CURR_TRANS input. If there is not 


a -evyc le 


//* already started (startCycle = FALSE), then start a new cycle. 


always @(CURR_TRANS) 
Pee sivareGycie) 


startCycle = ‘FALSE; 

else if (CURR_TRANS == ‘NONE) 
startCyclem= *FALSE; 

else 
StageGyvecle = ‘TRUE? 


114 


//* At each positive edge of the system reference clock, if the 
//* RESET_N input line is low, then set up system for initial burst 
//* read from ROM at address 1FC00000 
always @(posedge SYSCLK_N) 
begin 
1f (!RESET_N) 
begin 
busValue = 32’h1FC00000; 
AD_enable = ‘HIGH; 
walt(RESET_N == ji 
bootCycle.= “TRUE; 
end 
end 


//* Watch for negative edge of the interrupt line INT5_N. If a 


//* €yole 1S Cuwrentiy -1n progress ;~ theneit 1S a cycle that. hasnt 


//* finished because of an incorrect control input. This means 
//* that if, for example, this R3081 initiated a READ while the 


//* other two R3081’s initiated a WRITE, it will be stuck waiting 


//* for signals from the memory controller which are associated 


//* with a READ. These signals will not come as expected because 
//* the system completed a WRITE cycle based on the voted majority 


//* from the other two R3081’s. After interrupting waiting 
//* processor (if necessary), perform simulated, abbreviated 


//* interrupt handler routine, beginning and ending the routine with 


//* a WRITE to "dummy address" 1F800000 
always @(negedge INT5_N) 


begin 
if (!startCycle) //* Then cycle is in progress 
case (CURR_TRANS[(2:0]) //* Interrupt waiting cycle 
S001: 


begin //* Interrupt a waiting READ_BYTE cycle 
disable readByte; 
@(negedge SYSCLK_N) 


begin 
RD_N_enable = ‘LOW; 
DATAEN_N_enable = ‘LOW; 
ADDR3_enable = ‘LOW; 
ADDR2_enable = ‘HIGH; 
@(posedge SYSCLK_N); 
end 
end 
2 Derk. 


begin //* Interrupt a waiting READ_WORD cycle 
disable readWord; 
@(negedge SYSCLK_N) 


begin 
RD_N_enable = ‘LOW; 
DATAEN_N_enable = ‘LOW; 
ADDR3_enable = ‘LOW; 
ADDR2_enable = ‘HIGH; 

@(posedge SYSCLK_N) ; 

end 

end 


iS 


eect te 
begin //* Interrupt a waiting READ_BURST cycle 
disable readBurst; 
@(negedge SYSCLK_N) 
begin 
RD_N_enable = ‘LOW; 
ADDR3_enable ‘LOW; 
ADDR2_enable ‘LOW; 
DATAEN_N_enable = ‘LOW; 
BURST_N_enable = ‘LOW; 
@(posedge SYSCLK_N) ; 
end 
end 


37 DOO: 

begin //* Interrupt a waiting WRITE_BYTE cycle 
disable writeByte; 
@(negedge SYSCLK_N) 


WR_N_enable = ‘LOW; 
@(posedge SYSCLK_N) 
begin 

AD_enable = ‘LOW; 

ADDR3_enable = ‘LOW; 

ADDR2_enable = ‘LOW; 
end 

end 
Sy pOne: 


begin //* Interrupt a waiting WRITE_WORD cycle 
disable writeWord; 
@(negedge SYSCLK_N) 
WR_N_enable = ‘LOW; 
@(posedge SYSCLK_N) 
begin 
AD_enable = ‘LOW; 
ADDR3_enable = ‘LOW; 
ADDR2_enable = ‘LOW; 
end 
end 


endcase 


//* The saved address and data information from the last bus 
//* cycle which caused the interrupt is used here simply to 
//* show that differences between the three processors will 
//* not cause a vote error interrupt to be generated due to 
//* the WRITE to "dummy address" iF800000. The use of the 
//* saved address and data information is not intended to 
//* show what would actually be written during an interrupt 
{7 Ou cEne . 
WolteWwora(32 hlF800000, 32° AEPrPFFEPRE) 
1f (saveAddress[31:0] >= 32’'hn00000000) 
writeWord(32'h00070000, saveAddress) ; 
else 
Wretteenonra(32 Noo070000, 32° nAbASASAS) > 
Pee (savepaca( si 20) = 32° nOC000000) 
writeWord(32'h00070004, saveData) ; 
else 
WEeeewona(sZ2 Hneoo7O004, 32°n78787878) ; 


ae 


readuora(32? 400070000); 
reaadnord( 32 1v0070004) 
writeWord(32’'h1F800000, 32’hHFFFFFFFF) ; 


end 


//* Initiate appropriate bus cycles based on CURR_TRANS input, and 
//* if startCyle is TRUE, or if a boot cycle is necessary. 
//* See the simulated, abbreviated interrupt handler routine above 
//* for how the saved address and data information is used. 
always 
begin 
if (startCycle && (CURR_TRANS == ‘READ_ BYTE) && !bootCycle) 
begin 
saveAddress = ADDRESS; 
saveData = DATA; 
readByte (ADDRESS) ; 
end 


else if (startCycle && (CURR_TRANS == ‘READ WORD) && !bootCycle) 
begin 

saveAddress = ADDRESS; 

saveData = DATA; 

readWord (ADDRESS) ; 


end 

else if ((startCycle && (CURR_TRANS == ‘READ BURST) ) 
|| bootCycle) 

begin 


saveAddress = ADDRESS; 
saveData = DATA; 
readBurst (ADDRESS) ; 


end 

else if (startCycle && (CURR_TRANS == ‘WRITE_BYTE) && 
'bootCycle) 

begin 


saveAddress = ADDRESS; 
saveData = DATA; 
writeByte(ADDRESS, DATA); 


end 

else if (startCycle && (CURR_TRANS == ‘WRITE_WORD) && 
'bootCycle) 

begin 


saveAddress = ADDRESS; 

saveData = DATA; 

writeWord(ADDRESS, DATA); 
end 


else 


@(posedge SYSCLK_N) ; 
end 


er ae 


fof ee RRR eR AS ROR RR RK RR RR RR ee ee ek Xe 


//* task: readByte 


is 

//* Description: Simulates the bus cycle for reading a byte from the 
jae given address by driving the A/D bus and associated control 
fae lines. It waits on the RDCEN_N input from the memory 

pan controller to indicate the memory has placed valid data on the 
Pe bus to read. 

fi 

//* Reference: (1) IDT79R3081 RISController with FPA Data Sheet 

Lge (2) R3081 Family Hardware User’s Guide 


ff NS KI OE AO IME IME IIe a ea TR I Pe ai eee Pee eg A ee ee ee 


task readByte; 
input [31:0] address; 


begin: readByte 
@(posedge SYSCLK_N) 


begin 
SstartCycle = ‘FALSE; 
busValue(31i¢4]) = address (31:4); 


lines 

(address[1] && address[0]); 
(address[1] && 'address[0]); 
('address[1] && address[0]); 
( le 


//* Set BE[3:0 
busValue[3] 
busValue [2] 
busValue[1] 


! 


busValue[0] 'address[1] && !address[0 
AD_enable = ‘HIGH; 
RD_N_enable = ‘HIGH; 


ADDR3_enable = address[3]; //* Set word address 
ADDR2_ enable = address[2]; 
ALE_enable = ‘HIGH; 

end 


@(negedge SYSCLK_N) 


begin 
AD_enable = ‘LOW; 
DATAEN_N_enable = ‘HIGH; 
ALE_enable = ‘LOW; 

end 


@(posedge RDCEN_N) ; 


@(negedge SYSCLK_N) 


begin 
RD_N_enable = ‘LOW; 
DATAEN_N_enable = ‘LOW; 
ADDR3_ enable = ‘LOW; 
ADDR2_enable = ‘LOW; 
end 
end 


endtask //* end task readByte 


eS 


ff RE NR RR MS POI RN, ee RAR, RR i ee ee ee ee ee 


//* task: readWord 


ip 

//* Description: Simulates the bus cycle for reading a word from the 
a given address by driving the A/D bus and associated control 

iG lines. It waits on the RDCEN_N input from the memory 

es controller to indicate the memory has placed valid data on the 
pe bus to read. 

Lis 

//* Reference: (1) IDT79R3081 RISController with FPA Data Sheet 

= (2) R3081 Family Hardware User’s Guide 


PP FR Re EO Re Re eee eee Oe Re eae ee oe 


task readword; 
inpuc "(3l:0)] address; 


begin: readword 
@(posedge SYSCLK_N) 


begin 
startCycle = ‘FALSE; 
busValue[31:4] = address([31:4]; 


//* Setesels 70 tines 


busValue[3] = ‘LOW; 

busValue[{2] = ‘LOW; 

busValue[1] = ‘LOW; 

busValue[{0] = ‘LOW; 

AD_enable = ‘HIGH; 

RD_N_enable = ‘HIGH; 

ADDR3_enable address[3]; //* Set word address 


ADDR2_ enable = address[2]; 
ALE enable = ‘HIGH; 
end 


@(negedge SYSCLK_N) 


begin 
AD_enable = ‘LOW; 
DATAEN_N_enable = ‘HIGH; 
ALE_enable = ‘LOW; 

end 


@(posedge RDCEN_N) ; 


@(negedge SYSCLEK_N) 


begin 
RD_N_enable = ‘LOW; 
DATAEN_N_enable = ‘LOW; 
ADDR3_enable = ‘LOW; 
ADDR2_enable = ‘LOW; 
end 
end 


endtask //* end task readWord 


eS 


Lf EERE RE RSE RE BF SR RR RR i RR ee ge ee 


//* task: readBurst 


aya 


fi 
//* Description: Simulates the bus cycle for burst reading four 


1* contiguous words of memory starting at the given address 
* by driving the A/D bus and associated control lines. 

iJ= It waits on the RDCEN_N four times input from the memory 
Vi controller to indicate the memory has placed valid data on 
fi- the bus to read. 

is 

//* Reference: (1) IDT79R3081 RISController with FPA Data Sheet 
fpr (2) R3081 Family Hardware User’s Guide 


ff I IKK RRR RR RM FRR IC RR Re Ag ee ee ee 


task readBurst; 
input [31:0] address; 


begin:readBurst 
@(posedge SYSCLK_N) 
begin 
sStartCycle = ‘FALSE; 
LE beotCyc le} 
//* ITE it 1s a Deoteucyelere ll FCO000CR.W. Tiwalread, 
//* be in busValue[31:0] for initial EPROM read 


begin 
busValue[(31:4] = address[31:4]; 


//* Set BE[3:0]) lines 


busValue[3] = ‘LOW; 
busValue[2] = ‘LOW; 
busValue[1] = ‘LOW; 
busValue[0] = ‘LOW; 
end 
bootCycle = ‘FALSE; 
AD_enable = ‘HIGH; 
RD_N_enable = ‘HIGH; 


ADDR3_ enable ‘LOW; //* Set word address of 1st word 
ADDR2_enable ‘LOW; 
ALE enable = ‘HIGH; 
BURST_N_enable = ‘HIGH; 
end 


- i it 


@(negedge SYSCLK_N) 

begin 
AD_enable = ‘LOw; 
DATAEN_N_ enable = ‘HIGH; 


ALE _enable = ‘LOW; 
end 
@(posedge RDCEN_N); //* Wait for 1st word 
@(negedge SYSCLK_N) 
begin 
ADDR2_enable = ‘HIGH; //* Set word address of 2nd word 
end 
@(posedge RDCEN_N); //* Wait for 2nd word 
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@(negedge SYSCLK_N) 
begin 


ADDR3_enable = ‘HIGH; //* 
ADDR2_enable = ‘LOW; 

end 

@(posedge RDCEN_N); //* Wait 


@(negedge SYSCLK_N) 
begin 

ADDR2_enable = ‘HIGH; //* 
end 


@(posedge RDCEN_N); //* Wait 


@(negedge SYSCLK_N) 

begin 
RD_N_enable = ‘LOW; 
ADDR3_enable = ‘LOW; 
ADDR2_enable = ‘LOW; 
DATAEN_N_enable = ‘LOW; 
BURST_N_enable = ‘LOW; 

end 


end 


endtask //* end task readBurst 


Set word address of 3rd word 


fOr 38rd word 


Set word address of 4th word 


for 42h wore 


LL DER TOR EIEN, ate ee SRR RE REN Ee OS en ee nae Oe hee Coane Oana hae | ae 


oe 
pi * 
pi 
es 
fae 
hae 
Ya 
ae 
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Description: 


task: writeByte 


Simulates. the bus cycle for writing avbyte of the 


given data at the given address by driving the A/D bus and 
associated control lines. It waits on the ACK_N input from 
the memory controller to indicate the data has been written. 


Reference: (1) IDT79R3081 RISController with FPA Data Sheet 


(2) R3081 Family Hardware User’s Guide 
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task writeByte; 


input [31:0] address, data; 


begin:writeByte 


@(posedge SYSCLK_N) 
begin 
startCycle = ‘FALSE; 


busValue[31:4] = address[31:4]; 


//* Set BE[3:0] lines 
busValue [3] 
busValue[2]} 
busValue [1] 
busValue[0] 


: 
! 
! 


AD_enable = ‘HIGH; 
WR _N_enable = ‘HIGH; 
ADDR3_enable = address[3]; 
ADDR2_enable = address[2]; 
ALE enable = ‘HIGH; 

end 


’ 


et 


'address[1] && ‘address[0 


(address[1] && address[0]); 
(address[1] && !address[0]) 
(!'address[1] && address[0]); 
( ] 


e 


if: 


EB 


//* Set word address 


@(negedge SYSCLK_N) 
begin 
ALE_enable = ‘LOW; 
#(C19 -min:tl9_typ:tl19_ max) 
busValue = data; 
end 


@(posedge ACK_N) ; 


@(negedge SYSCLK_N) 
begin 

WR_N_enable = 
end 


‘LOW; 


@(posedge SYSCLK_N) 


begin 
AD _enable = ‘LOW; 
ADDR3_enable = ‘LOW; 
ADDR2_enable = ‘LOW; 
end 
end 


endtask //* end task writeByte 


fp eR ee i ee eee 


//* task: writeWord 
Lf = 

ji * DeScCripcion: 

fan 


J/* associated control lines. 
pis 

Li 

//* Reference: (an) 

fa = (2) 


Simulates the bus cycle for writing a word of 
given data at the given address by driving the A/D bus and 
It waits on the ACK_N input from 
the memory controller to indicate the data has been written. 


IDT79R3081 RISController with FPA Data Sheet 
R3081 Family Hardware User’s Guide 
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task writeWord; 
input [31:0] address, data; 
begin:writeWord 
@(posedge SYSCLK_N) 
begin 


startCycle = ‘FALSE; 


busValue[31:4] = address[31:4]; 


//* Set BE[3:0] lines 


busValue[3] = ‘LOW; 
busValue[2] = ‘LOW; 
busValue[1] = ‘LOW; 
busValue[0O] = ‘LOW; 
AD_enable = ‘HIGH; 
WR_N_enable = ‘HIGH; 
ADDR3_enable address[3]; 


ADDR2_enable = address[2]; 
ALE enable = ‘HIGH; 
end 


eee 


//* Set word address 


@(negedge SYSCLK_N) 
begin 
ALE_enable = ‘LOW; 
#(ti9_min:t19_typ:t19_max) 
busValue = data; 


end 
@(posedge ACK_N || !INT5_N); 
@(negedge SYSCLK_N) 
begin 
WR_N_enable = ‘LOW; 
end 


@(posedge SYSCLE_N) 


begin 
AD_enable = ‘LOW; 
ADDR3_enable = ‘LOW; 
ADDR2_ enable = ‘LOW; 
end 
end 


endtask //* end task writeWord 


endmodule //* end module r3081 


fof oe ee eee eR Re Re A ee ee ee ee 


//* Module: busDriver 


li 
//* Description: Assigns valueToGo to address/data bus when driveEnable 
hae is HIGH, otherwise drives bus to high impedance. 
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module busDriver(busLine, valueToGo, driveEnable); 
parameter //* Parameters may be overridden for each 
//* anstantiation Cf this moaule 


R_min = 0, //* Minimum Rise Time 
R typ = 2, //* Typical Rise Time 
R_max = 4, //* Maximum Rise Time 
Fmin = 0, //* Minimum Fall Time 
Futype= 2, //*stypical, False, Time 
F_max = 4, //* Maximum Fall Time 
Z2-Min = 0, //7* Minimum Time te nigh ampedance 
Z typ = 2, //* Typical Time to high impedance 
Zmax = 4; //* Maximum Time to high impedance 


INOUE. 631-0] bushi ne: 
input [{31:0] valueToGo; 
input aGriveEnable; 


assign #{(Romin: Retyo Remax fem: fot yo- Fo max, 2 mi): oe ey p. Zama 
busLine = (driveEnable) ?valueToGo: ‘bz; 


endmodule //* end module busDriver 
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//* Module: activeLowLineDriver 


ri 
//* Description: Drives contLine LOW when driveEnable is HIGH, 
Lys otherwise contLine remains HIGH. 


Jf I RC OT RP PR Te We PO arte TR PE RNC Re Aes ine ey a eR eee a er 


module activeLowLineDriver(contLine, driveEnable); 
parameter //* Parameters may be overridden for each 
//* instantiation of this module 


R_min = 0, //* Minimum Rise Time 
R_typ = 2, //* Typical Rise Time 
R_max = 4, //* Maximum Rise Time 
F_min = 0, //* Minimum Fall Time 
Potyo ==2, > //* Typical Fall Time 
F_max = 4; //* Maximum Fall Time 


inout. contbine: 
input driveEnable; 


assign #(R_min:R_typ:R_max,F_min:F_typ:F_max) 
contLine = (driveEnable) ?0:1; 


endmodule //* end module activeLowLineDriver 
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//* Module: activeLowLineDriver 


jars 
//* Description: Drives contLine HIGH when driveEnable is HIGH, 
Fi otherwise contLine remains LOW. 
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module activeHighLineDriver(contLine, driveEnable) ; 
parameter //* Parameters may be overridden for each 
//* aInsantraticn of this module 


Roman = 90, //* Minimum Rise Time 
R typ = 2, //* Typical Rise Time 
R_max = 4, //* Maximum Rise Time 
Bona (O70) a Mansmum Fa liaeiame 
F typo = 2, //* Typical Fale Time 
F_max = 4; //* Maximum Fall Time 


IMOUte CeontlLine: 
input driveEnable; 


assign #(R_min:R_typ:R_max, F_min:F_typ:F_max) 
COonebine = driverEnable) 2120: 


endmodule //* end module activeHighLineDriver 
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B. 32-BIT VOTER/ERROR DETECTOR AND TRANSCEIVER 


VOTES2E iT eur 








Aco lee Coe VOL RAOUL sles VOTE DS OU sia. O> 
Big le OM 


CS]. 3c0> VOTE_ERROR 


A<31..056 
B<31..9>¢ 
cai. Ose 









VOTE_ERROR 
















FORCE_AGIFORCE_A 
FORCE_BGaJFORCE_B RD RD_N 
PORGE CS ear onGeac WI RK WR_N 
Figure 48. 32-Bit Voter/Error Detector and Transceiver. 


f [REUTER REE ES ERA EAA REE RATER ERR ER RAKE EE ERAS EE ee ee eee eK ee oe KR 


i} PAE Les “JFOeCes ZO em xeur.y 

Ve 

//*™ Description: , Verilog £ite for 4 32 bit Majority Vvorer/erro: 
or detector and transceiver. 

yy 

f7 "BME ROL os enn Cs Payne wir: 

ff =e Oate 0/7 41./ 36 


[ [RRR EERRAEERRAEER ERE RAKE EK EERE REAR REE AE eR ee ee 


‘timescale 1 ns /1 ps 


f [PERE EARER ERR ERE RE AERE REE EERE RK REA EAAR CARR RE ORK KR ee eK ee 


//* Module: bidirsw 


LT 

//* Description: Verilog behavioral module for a@ Didirectional™ switch 
pi with tristate. If CONT_LINE is high, then the INOUT_LINE 

La information drives the LINE_OUT line (LINE_OUT = INOUT_LINE) ; 

at otherwise, the LINE_OUT line is in a high impedance state. If£ 

en CONT_LINE is low, then the LINE_IN information drives the 

hay = INOUT_LINE (INOUT_LINE = LINE_IN); otherwise, the INOUT_LINE line 
fake 1S in a high impedance state. 


[ [RRR RERKKRKKKKKKKKRKKKKKKKKKa KKK K KK KKKkKKKkKkKkkk keke kkk k Keke kae Ke KKK Ke KK KK 
module bidirsw (LINE IN, LINE OUT. INOUT_ DINE, CONT LENE); 

inpuce LINE sLN- 

OUEDUt LiINE2our.: 

inout INOUT_LINE; 

input CONTSLENG - 


assign INOUT_LINE = (!CONT_LINE) ?LINE_IN: ’bz; 
assign LINE]OUT = (CONT LINE) 2iNOUT-_LINE- bz; 


endmodule //* end module bidirsw 


Zo 
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//* Module: votecell_xcvr 


i o% 
/ 


//* Description: Verilog structural module for a one bit voter/error 


ia detector and transceiver. Votes 3 input bits to produce 1 output 
La bit. FORCE_A, FORCE_B, & FORCE_C inputs can be used to disable 
Le voting and Eorce data on A, B, O86 C-through Go ene outpeuc. 

Le Uses 4 bidirsw modules. 


LP EER EAR EEE ER RRR SRR Ke ND BN. BR NIN ee Re ee ee a ee 


module votecell_xcvr (A, B, C, FORCE_A, FORCE_B, FORCE_C, RD_N, WR_N, 
MAJ_OUT, MAJ_ERROR) ; 


TAG Wem, See: 

input FORCE_A, FORCE_B, FORCE_C, RD_N, WR_N; 
Inoue MAJ OUT; 

output MAJ_ERROR; 

wire MAJORITY; 


Eri” INA iNeeeeeN_C; RDL IN; 


//* If RD_N is low, then RD_IN drives all three input/output lines 
{//* A, B, & C; otherwise, A, B, & C drive IN_A, IN_-B,-& INC which 
//* are then voted. 
bidirsw 

Swe noo LN, Noa eA RDN), 

Swe (hoot oN Bae RDN) 

Sveo (hos, INC. CoeRDet)-: 


//* If WRLN is low, then MAJORITY drives the output line MAJ_OUT; 
//* otherwise, MAJ_OUT drives the RD_IN line. 
bidirsw 

sw_4(MAJORITY, RD_IN, MAJ_OUT, WR_N); 


HOE 
moe | (NOT IN Ay eines). 
not_2 (NOT_IN_B, IN_B), 
not. 3 (NOT_IN“C MEN C), 
not_—4 (NOT _FORCE2A, FORCE A), 
not_5 (NOT_FORCE_B, FORCE_B), 
noetee (NOT _FORCE@C.. FORCE C); 


and 

and] cance laouty IN A; “FORCE A) 

andes (and=2e2out, IN_B, FORCE 2); 

and 3 “(anes 320uc, INC. FORCE iC), 

and 4 (and 4-our, INA, IN_B, NOT_FORCGCE A, NOTZFORCE 3S, 
NOT_FORCE_C), 

and 5 (and 5 out, INA, eiveGo, JOT FORCESA, NOTLEGRCE_EB, 
(MOT=FORCE-C)- 

anc. 6 ane. G2out, IN_-B, INC, NOT FeRCErs NOT SFORCE 5, 
NOTSEO RCE IC} 


or #15 


Or De elieawOnrt yh andulecull, ancdeceouc, andes Out... and. 4) oOvuE, 
ances .Out, and 6 OuE); 


ZO 


and 

and 7 (and) 7 out, NOT_IN Ay. NOT_IN BB, INC, NOT FORCE“A, 
NOT -FORCE-B, NOT FORGE ee). 

anad_8 (and 8.out, NOT_IN2Ay INES, NOTIN. C.. NOT FORCE Ay 
NOT FORCE BB} NOT FORGE 2¢). 

and_9 (and_9_out, NOT_IN_A, IN_B, IN_C, NOT_FORCE_A, NOT_FORCE_B, 
NOTSFORGE. CC); 

and: 10’ {andes lOzour, IN A,. NOT IN_B, NOT_IN_C, NGTsFORCE A, 
NOT]FORCES:. NOT FORGE Cj; 

andl sand Vout, IN2A SeNet eine Be IN NOT rPORCEs7 
NOT. FORCE._B, NOT TFORGCE UC) 

and-12 (and 2 out, IN A; IN Bo NOT _ INC, NOT FORCE <4; 
NOT FORCE BB, NOT FORCESc | 


or #15 
ori 2 AMAJ_ERROR,..andg=7.0Ut, ana 6-0uL,. and. Jo oue, and lozouc, 
and SOs. angie? our). 
endmodule //* end module votecell_xcvr 
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//* Module: vote8bit_xcvr 


oe: 

//* Description: Verilog structural module for an 8 bit voter/error 
a detector and transceiver. Votes 24 input bits to produce 8 

pis output bits. FORCE_A, FORCE_B, & FORCE_C inputs can be used to 
f//* disable voting and =torce data on Al7<0)] , Biv s0ie cr <i Oy 

fon = through to the output. Uses eight votecell_xcvr modules. 


J [RR RIOR RR RR ee 


module voregbilt xcvr (A, 8740, FORCE Ay PORGe EB, FORCE IG wel oN ee o, 
VOTED OUT, VOTE ERROR). 


DOU Ur Oe ee Se oe 

InApWE. FORCE SA. FORCES, FORCE _C; 
input RD_N, WR_N; 

THOue 7-0)" VOLEbDsOUTL. 

OUCBDUE VOTE ERRORS 


wire ERROR_0, ERROR_1, ERROR_2, ERROR_3, ERROR_4, ERROR_5, ERROR_6, 
ERROR_7; 


votecell xcvr 

cell10 {4/0/27 810),-€C10)], FORCELA, FORCE. B, FORCESC, RDN ,PWReN, 
VOTER ZOUT)O >. =RRORK. 0): 

eelll (All) Bill, ©€ltl7 BORCE A, FORCE _B, FORGE GC, RDS, WRN, 
VOTEDSOUN | I, ERROR. is). 

cell? “~“AlZzi Bie Cl Ze shORGe A, FORCE.B, FORCE2C.) RDAN, sw le 
VOTEDIOUT | 25. RR OR. 2) 

eell3 (Aleiz- Bisel, Cis]. FORGE A, FORGE UB, PORGE C; RPA eRe 
VOTE DSaOUL | 3 |e RROR aoe 

cell4 (A[4], B[4], C[{4], FORCE_A, FORCE_B, FORCE_C, RD_N, WR_N, 
VOTEDZOUT (4)2> BRROKw4A 

cell5 (A[5), B([5jJ, C{5], FORCE_A, FORCE_B, FORCE_C, RD_N, WR_N, 
VOTEDsOUL (5); ERROR <5), 

cell6é (Al6)]> Ble], Ci6], FORCE_A, FORCE BB, FORCE-C) RDO Wea 
VOTED OUT(G]> ZRROR6)., 

cell? (Al7), Bi7j, Cl7], FORCE_A, FORGE BB, FORCERGye wee, WReh 
VOTEDOOUT (7 le> ERROR: 7) > 


eT 


or #10 
Or 1 (VOTESERROR,. ERROR 0, ERROR, 1 ERROR- 2. ERROR 3 eEeRnoRe 4. 
ERROR_5, ERROR_6, ERROR_7); 


endmodule //* end module vote8bit_xcvr 
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Module: vote32bit_xcvr 


Description: ‘Verilog Structural module for es32. bic. voter/errcr 
detector and transceiver. Votes 96 input bits to produce 32 
output bits. FORCE_A, FORCE_B, & FORCE_C inputs can be used 
to disable voting and force data on =A[31:0), Bi3l:0)]5 or Cis Gg 
through to the output. Uses four vote8bit_xcvr modules. 

This module drives the VOTE32BIT_XCVR block in the Cadence 
Concept schematic. 

NOTE: Module name must match the Cadence Concept block name, but 
must be in lower case. Signal names of inout, input, and output 
lines and size (or bus width) must match the signal names in the 
Cadence Concept block. 
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module vote32bit_xcvr (A, B, C, FORCE_A, FORCE_B, FORCE_C, 


RDaN ,.wWRENys VOTEDSOUL VOTReERRGR i; 


inout, [Sao]. A, B,C; 

INPUT SORGEEe, FORGE. B, FORCE. C; 
input RD_N, WR_N; 

INOUE sie Ul, VOTEDE OUT; 

OUEDUE VOTE ERROR; 


WitsewERROR_O, ERROR ERROR oR RORmwo. 


vote8bit_xcvr 

yotcer0 (Al31-24], Bi(3i-24], C(3l:24)) PORGE2A SO; Geee ee OReume. 
Roel WRON. VOTED. OUT(31:24) > ERRORZSO? 

veterl (2123 216], Bi23:16], €(23:16], FORCE A, SEORCE BS, FORGEZE- 
RDEN, WREN, VOTED OUT([23::16]) ERROR iy 

Wetere walls -o |), b115-.6), CLS: 8)].,. FPORCESA, FORCE BB FORGCESG- 
RDON, WRON, VOTEDOOUT(15 =-8)), ERROR 2), 

wieters (Al? 0]. Bi7:0), Cl7-0)], FORCE A, FORCE B, FORGECE, 
RDN, WRON; VOTED JOUT(7: 0], ERROK 3) > 


or #10 
Ome. (VOTE_ERROR, ERROR.O;, ERROK_1, ERROR_2, ERROR 3); 


endmodule //* end module vote32bit_xcvr 
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OF 


8-BIT VOTER/ERROR DETECTOR 


VUOTESBIT 









AC7.. @ @JAC 7. . @ 
B<7..@ 678¢7..@ VOTED_OUT<7..2>bL.4 VOTED_OUT<7.. @ 
care «OD Guedes «~~ > 
FORCE_AGJFORCE_A 
FORCE_B8 GJ FORCE_8 UOTE_ERROR Lo VOTE_ERROR 
FORCE_CoJFORCE_c 

Figure 49. 8-Bit Voter/Error Detector. 
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File: vote8bit.v 

Description: ‘Verilog Structural file form 8 Ditwmedgority vorer and 
error detector using 8 votecell modules 

Author: John C. Payne, Jr. 

Date: 10/06/98 


fn ee Pere De RP oes Pee eee eR I ee ra ee 


‘timescale 1 ns /1 ps 


fue ee EK RR RK RK eR ON ee ae 


i 
fos 
ai 
fy 
a 
al 


Module: votecell 
Description: Verilog structural module for a one bit voter/error 
detector. Votes 3 Anbu Dits to produce 1 olbput Dime ORCELA, 


FORCE_B, & FORCE_C inputs can be used to disable voting and 


force data on A, B, 


Oe € Curough to the ou bpue: 


Tf RRRREKKREREERARE ERK KREKRRR EKER RERER ERR KKARKRERKKA RRR KARA ERAKKA EAE RAE RAKE 


module votecell 


input INSAyeFORCE.4. 
output MAJ_OUT, MAJ_ERROR; 


not 
MOtL 2 
Het =3 
not_4 
HOE > 
not_6 


and_1 
and_2 
and_3 
and_4 


and_5 


and_6 


(IN2A; PORGe A, INGE, FPORCELE, 
MAJ_ERROR) ; 


TNees, FORCE.8, ING ye. cue. 


NOT_IN_A, IN_A), 
NOP SINS elias 
iN2e) 


( 
( 
(NOT INGC- 
(NOT_FORCE_A, FORCE_A), 
( 
( 


NOTSFORC ESB. FORGE SB) | 

NOT FORCE 23, “FORCE. Cc) 

(and_7_ out, INA, FORCE_A), 

(and 2Z2Oub) ENEB sl ORenme 

(and =3 “Out ENG FP ORCE Cer 

(ana 4 out, IN@A, IN_B, NOT FORGE 24 (Ol RO; Geae, 


NOT FORGET )o 
(and a5 FOUL al Nea. 
NOT_FORCE_C) , 
(ana 6 oue, INE, 
NOT FORGE )a 


IN#@)* NOTEFORGE A Ne? =F ORGESE, 


IN®@;, NOTLEFORCESA pilot -FoRncEe_ 37 
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IN=C, FORGE{C 7 ia OUT, 


or #15 
Oor_1 ({(MAJ_OUT, and] Out, and=2 2600, and "3s out) ene-42ou-, 
ang 5 OuG, ana 6500) 


and 
and_7 (and_7_out, NOT_IN_A, NOT_IN_B, IN_C, NOT_FORCE_A, 
NOT FORCES... NOTSRFORGE ©); 
and_8 (and_8 out, NOT_IN_A, IN_B, NOT _IN-G,. NOT _FORCE 2A, 
NOT FORCE 285 (NOT _FORCE C) ; 
and_9 (and_9_out, NOT_IN_A, IN_B, IN_C, NOT_FORCE_A, NOT_FORCE_B, 
NOT_FORCE_C), 
and) 20 (and_10_out,) IN-A, (NOT_IN CB, “NOT_IN Cy NOT FPORCE-A, 
NOT. FORCE. B, NOT FORCE €C), 
and_11 (and_1l_out, IN_A, NOT_IN_B, IN_C, NOT_FORCE_A, 
NOT_FORCE_B, NOT_FORCE_C), 
and 12 (and 12 oOut,. "INA; IN _8, NOT_IN CG, NOT FORCE A, 
NOT FORCE BB, NOT _FPORCE ©); 


or #15 
Or-2 {MAJ ERROR, and.7 out, and 8 outyrvande9e2out, and 10mMeuc, 
and_1ll_out, and_12_out); 


endmodule //* end module votecell 
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Module: vote8bit 


Description: Verilog structural module for an 8 bit voter/error 
detector. ~vVotes 24. input. bits. Co produce 8 ocuboue bites. 
FORCE_A, FORCE_B, & FORCE_C inputs can be used to disable voting 
and force data on Aly. 0); B[7:0)], cor €([7:0] through to the 
output. Uses eight votecell modules. This module drives the 
VOTE8BIT block in the Cadence Concept schematic. 
NOTE: Module name must match the Cadence Concept block name, but 
must be in lower case. Signal names of inout, input, and output 
lines and size (or bus width) must match the signal names in the 
Cadence Concept block. 
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module votesbiut. (A, FORCE“ A Se FPORCE_2, "G7 eeORGEZC | JOTEREOUr, 


VOTE ERROR)G 


ieapuicwe ) -Oen, eee: 

tpi PORCE Aj BORGEeB, FORCENG: 
OuEpUue “(/- tim VOTED_OUT; 
OuUbDUEMVOLTE ERROR; 


Wire ERROR 0; ERROR 1, ERROR 2, EBRROR@s)) ERROR =, ERROR 2, ERROR -G, 
ERROR 7; 


votecell 
cello 4a(0l) FORCE A, B(0)]9 seer eEwe, Clo)” EORCE Ge 
VOTED_OUT(O], ERRORJO Ie 


Celli ORCe AyacidieeerORCE B, Cll], FORCE C: 
VOtsp OUl[ ii, ERROR 1)? 

cel iar |., BORCE Aves (2) aeFORCE_B, C(2], FORCE_G, 
VOUBeeOUl(Zic ERROR. 2), 


is) 


cells WAS). PORCH A, -B 3 pron Geet iC 2a er ORecrae. 
VOTED20UT 3). ERRORS) 7 

cell4é (Ale) FORCE A, Bl4) FORGE. 6. °C (4), FORCE Ee. 
VOTED2OUT (41.4 ERROR 4); 

cells (AS; FORCE A) Baie ORCe ss ac loi. FORCE <C, 
VOLEDSOUT | Sih, cERR@Riso) 

Gell v AilGlew 5 OSC bea Bio FORCECE wc (>) je ORerme. 
VOTED_OUT (SG ERROR 20); 

cell7 (Al7]] -FORCE A; B(7]), FORGCE.B, Cil7 |p. 2 ORGHSe, 
VOTED OUT(7)., ERROR_7); 


or #10 
or_1 (VOTE_ERROR, ERROR_0O, ERROR_1, ERROR_2, ERROR_3, ERROR_4, 
ERROR_5, ERROR_6, ERROR_7) ; 


endmodule //* end module vote8bit 
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Figure 50. 32-Bit Voter/Error Detector. 


ff TEER EAE EERE KAKA EEK ARR EKER EE KAR ERK KARR RAK KKK KX RRR RX ERS SS eee 


//* File: vote32bit.v 


ff 

//* Description: Verilog structural file for 32 bit Majority voreér, and 
{p= error detector using 4 voter_8bit modules 

if = 


if = Venom. a JONG. Payne, slr . 
//* Date: 10/06/98 


ee ee ee ee Oe eRe ee eee 


‘timescale 1 ns /1 ps 


J [BRK ERE EK EK EKA EAE KREMER RE RR RR CR ROR KK RRR RR RR OR RK ORK Ee ee Ke 


Jj i= Modules Vvore3zoLe 


i 

{//* DeSsecriperon:, Werliloo structural module for a 32 bit voter/error 
Pix detector., Votes 96u1nput bits to produce 32 output bits. 

ifs FORCE_A, FORCE_B, & FORCE_C inputs can be used to disable voting 
Lie and, force date. on Alaiw-0)], Bl3i:0ly. or Gisl- OR earougimeoerene 

fo output. Uses four vote8bit modules. This module drives the 

Lie VOTE3ZBIT block in the Cadence Concept sehematic. 

Jose NOTE: Module name must match the Cadence Concept block name, but 
Tie must be in lower case. Signal names of linout, input, and output 
fie lines and size (or bus width) must match the signal names in the 
ee Cadence Concept block. 


lf ee ER KK er ETRE RE RRA RE RRR RK EKER ERE RR Se eee 


mMOdUMemVyoreeZoie (nh wFOKGs A, B, FORCE B, C, FORCE _C, VOTED_OUT, 
VOTE_ERROR) ; 


LADUE ae), AaB, CG; 

input FORCE_A, FORCE_B, FORCE_C; 
GUEpucmtol- 0). VOTED OUT; 

OUGpUE VOTE_ERROR:;: 


Wire ERROR 0 peeeROR | ERROR=2, ERROR _3 >: 


2 


vote8bit 
voctcerO (A[31224]>- FORCE_A,-B(31:24), FORCE BY Ci3l:241)., SORCE CC, 


VOTEDVOUT (3224) 7 SPRRoOR Go. 

voterl (A[23:16], FORCE A, B[23:16)], FORCE. B, C[23:16}], FORCE C, 
VOTED OUTI23 -16)])(. ERROR eh), 

vVotverZ. (All5.315 FORCE A wes cI, FORCE SE, “Cl e520)) FORCES. 
VOREDCOULT (Io. 6:.,. ERROR 2); 

VOCEr stn le 0 ee PORCE.A A, Big 0 FORCE Bb wcl) 0. FORCE. ? 
VOTEDVOUTI7.0)], ERROR T3)- 


or #10 
or_1 (VOTE_ERROR, ERROR_0, ERROR_1, ERROR_2, ERROR_3); 


endmodule //* end module vote32bit 
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Figure 51. Memory/Address Decoder. 


ee ee ee 


//* File: mem_decoder.v 


Li 

//* Description: Verilog structural file for memory decoder to 
fis generate various chip selects. 

Pp 


j/7* Author: Vohn Cz. Payne, Jr: 
//* Date: 10/06/98 


[ [RRR KR KK RK I RII II III I II II RI III I II a tk kk a ee 


‘timescale 1 ns / 1 ps 


[ [FRR RRKRRRERER RE RRKR RE KERR KEE KR KEKKEERE KK RERKAKKKKKEKE RR RK RK EKER KE EK ET ee 


//* Module: mem_decoder 


en 

//* Description: Verilog behavioral module for a memory decoder. Uses 
Lies input A[31:17] to generate three active low chip select outputs. 
fe This module drives the MEM_DECODER block in the Cadence Concept 
Lye schematic. 

foo NOTE: Module name must match the Cadence Concept block name, but 
Le must be in lower case. Signal names of inout, input, and output 
Li lines and size (or bus width) must match the signal names in the 
jf Cadence Concept block. 


[af TORR RARER RARER KE KEKE EK KERKKKKKKRKEKREKKEKRKKKKEKRKKKR RK KKK RRR KE RRR EK EX 


module mem_decoder (A, RAMCS_N, EPROMCS_N, INTCS_N); 


mou (Sissy jek 
output RAMCS_N, EPROMCS_N, INTCS_N; 
wire RAMCS_N, EPROMCS_N, INTCS_N; 


i see RAM = 00000000 to OOO7FFFF 
Lf EPROM = 1FCO0000 to 1LFCOxxxx 
bien INT = 1F800000 "Dummy Address to Disable Vote Error Interrupts" 
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assign #45 


RAMCS_N = LA baa 
Vaso 7 | 
(A(23] 
(A[19] 

assign #45 
EPROMCS_N = (!A[31] 
A[27] 
A[23] 
'A[19] 

assign #45 
INTCS_N = Ee es 
A[27] 
A[23] 
'A[19] 
endmodule //* end module 
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Figure 52. Memory/Error Controller. 


[ [RRR RRR RKRRKRKEKEEKEKKRKEKKKKKKKRKKKKKKKKKKKKKKKKRKKKK KKK KK KKK KKKKKKKKKKRKK KKK KE 


jj File memeocont.v 


//* 


j//**Pescription: Verilog behavioral file for memory/error controlles 


Ws 
ee 
1 a 
1 i 
i 
at 
ja 
(3 


tO control timing cycles of various bus Eransactionse 
Reference: (1) IDT RISC Microprocessor Application Guide, 
Application Note AN-86, IDT79R3051 System Design 
Example 
AULQOTs 20h Crayne, Jr. 


Date: 11/3/98 


[LEER RERRREREEEEEKREEEKEKREKKEEREKEKREEEEEKEEKKEKKEKKKEREE KK RKEKKKK EKER KE XA 


‘timescale ins /1 ps 


ff Rk Re ee ee ee er ee eS ee ee 


fh 
foe 
fae 
je 
iJ 
is 
oe 
fas 
i 
jo 
os 
fo 
i 
lao 
ia 
fee 
Lo 
ae 


Module: mem_cont 


Description: Verilog behavioral module for the memory/error 


controller. Produces READ, WRITE, and BUS ERROR acknowledge 
controls (RDCEN_N, ACK_N, BUSERROR_N) based on a 5 bit counter 
and cycle end stall cycle (wait state) equations. 

Also produces an interrupt if there is a vote error detected on 
the ADDRERR, CONTERR, or DATAERR inputs. The ADDRERR, CONTERR, 
and DATAERR inputs are saved at specified values of the counter, 
and an error interrupt is generated only at the end of the 
CWErenbecyvele, SO Ehat the current cyele is allowed to finish. 
If INTCS_N goes low during a dummy write to that address, this 
Signals the beginning of the interrupt handler routine and 

vote error interrupts are disabled until INTCS_N goes low again, 
which signals the end of the interrupt handler routine. 

This module also controls the three lines ADDRTOFIFO_N, 
CONTTOFIFO_N, and DATATOFIFO_N which send the appropriate 
information to the dedicated FIFOs. These three lines are 


S16 


Loe 
ie 
Le 
i. 
Kee 
Fie 
he 
ae 
ie 
Lie 
Lie 
co 
La 
foe 
he 
fas 
fd & 


active low enable lines which allow, through the use of 32-bit 
tri-state buffers, the ADDRESS, CONTROL, and DATA information 
from the processor to be multiplexed onto a single 32-bit bus 
which is the input bus for each dedicated FIFO. The FIFOWE_N 
line signals awrite to the FIFOs at the appropriate time within 
a bus cycle based on the 5-bit counter. 

This module drives the MEM _ CONT block in the Cadence Concept 
schematic. 

NOTE: Module name must match the Cadence Concept block name, but 
must be in lower case. Signal names of inout, input, and output 
lines and size (or bus width) must match the signal names in the 
Cadence Concept block. 


Reference: (1) IDT RISC Microprocessor Application Guide, 


Application Note AN-86, IDT79R3051 System Design 
Example 


Lf CREE RRE RARE ER RR A ee Sn er SON ee Re A ee en ee * 


module mem_cont (SYSCLK_N, RESET_N, VOTRD_N, VOTWR_N, VOTBURST_N, 


RAMCSN  EPROMGSEN, INTeSaN, USEPIFO, DATAEER, 
ADDRERR  CONIERR. Noi Rian, CyvcCepay, 
RBGENIN, -2ChahN, BUSERRORIN, 2epRICEIEOLN, 
DATATOFIFO_N, CONTTOFIFO_N, FIFOWE_N, 
VOTERRORZINT_N) ; 


ImNpueMSYSCEK NN, //* System clock from R3081 
RESET_N, //* Reset from MEMEN module 
VOTRD-N- //* Voted read from R3081 
VOTWR_N, //* Voted write from R3081 
VOTBURST_N, //* Voted burst from R3081 
RAMCS_N, //* RAM chip select from memory decoder 
EPROMCS_N, //* EPROM chip select from memory decoder 
TINTCS ON, //* INT chip select from memory decoder 
USEFIFO, //* SetrHigh ~oulrl up) ‘6 Write to. FErOs 
DATAERR, //* Data Vote Error from 32-bit Data Voter 
ADDRERR, //* Address Vote Error from 32-bit Address Voter 
CONTERR; 7//* Centro! VOEe Barror fEremr5o—51 ee Onterol «Verer 
output ENSTART_N, //* Read/write output enable start 
CYCEND_N, //* Cyle end (composite ACK) 
RDCEN_N, //* R3081 read buffer clock enable 
ACK_N, '//* R3081 acknowledge 
BUSERROR_N, {i VRS OG DUS. error 
ADDRTOFIFO_N, //* Address To FIFO to Address Buffers 
DATATOFIFO_N, //* Data To FIFO to Data Butters 
CONTTOFIFO_N, //* Control “To FIFO te, conuro Burfers 
FIFOWE_N, //* FIFO Write Enable 


VOTERROR -INTON: “//* Interrupe Sent to. R306) 


wire ENSTART ON, CYCEND_N® RDCENIN, ACKIN = BSUSERRCRE 


ADDETOPEFOLUN, ~ DATATOFIFOLN, CONTTORPIEGEY 


_ FLPOWELN, VOTERROR INTE, 


req ele Ole countes:: 

reg voteErrorintEn; 

wire voteError; 

reg saveErrorl, saveError2, saveError3, saveError4; 
reg voteErroriIntValueToGo; 
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/~ At the positive edge of the reset input line, RESET_N, ensure 
//* vote error interrupts are enabled, the interrupt line is HIGH, 
//* and the saved error flags are initialized to indicated no error 
//* has been detected. 


always 
@(posedge RESET_N) 

begin 
VOtCERErOrIngEn =. 1: 
voteErroriIntValueToGo = 1; 
saveErrorl = 0; 
saveError2 = 0; 
saveError3 = 0; 
saveError4 = Q; 

end 


//* At each positive edge of the system reference clock generated 
//* by the R3081, reset the counter if RESET_N or CYCEND_N goes low. 
//* Increment the counter if VOTRD_N or VOTWR_N is low. Save the 
//* error flag at the four different counter values, so that the 
//* cycle is allowed to finish. The use of four different saved 
//* values allows a single READ or WRITE to finish as well as a 
//* BURST READ to finish. If the current transaction is a BURST 
//* READ, then an ADDRERR, CONTERR, or DATAERR is sampled four times. 
always 

@(posedge SYSCLK_N) 


begin 

if (!RESET_N |j !CYCEND_N) 
counter = 0; 

else if (!VOTRD_N || !VOTWR_N) 
counter = scomnter 4. 

if (RESET_N && CYCEND_N && (counter == 5’h05)) 
saveErrorl = voteError; 

else if (RESETIN && CYCEND_N £&& (counter == 5 hoo 
SaveError2 = voteError; 

else if (RESET_N && CYCEND_N && (counter == 5’h0B)) 
saveError3 = voteError; 

else if (RESET_N && CYCEND_N && (counter == 5’hl17)) 
Savebrron4 = vVoteError; 


/jm Temat the endrof aweyvycle, and one of the Saved eErrors 
//* indicates an error occurred, then generate an interrupt 
//* only if vote error interrupts are currently enabled. 
1£ (RESET_N && !CYCEND_N && voteErroriIntEn && 
(saveErrorl || saveError2 || saveError3 || saveError4) ) 
voteErroriIntValueToGo = 0; 
end 


//* Watch for negative edge of INTCS_N, and disable/reenable vote 
//*.@rrOr. Aneerzupes- 
always 
@(negedge INTCS_N) 
begin 
VOECErrOrilimeEn. ="~VOCERELOmIAcEnN; 
VOltCEu=rnOncI aevyaluerlocGo = 1. 
saveErrorl = 0; 
SsaveError2 = 0; 


ce 


OG 
Gy 


saveError3 
saveError4 
end 


//* Update internal voteError flag 
assign #30 voteError = (ADDRERR || DATAERR || CONTERR) ?1:0; 


//* Update VOTERROR_INT_N output line 
assign #30 VOTERROR_INT_N = voteErrorIntValueToGo; 


//* Update ENSTART_N output line 
assign #30 ENSTART_N = (RESET_N && (counter >= 1) && CYCEND_N) ?0:1; 


//* Update CYGENDLN output ine 
assign #30 CYCEND_N = 

(RESET_N && CYCEND_N && ( 
('RAMCS_N && (counter == 5’h05) && !VOTRD_N && VOTBURST_N) 
|| (!RAMCS_N && (counter == 5’h17) && !VOTRD_N && !VOTBURST_N) 
|| (!RAMCS_N && (counter == 5’h06) && !VOTWR_N) 
|| (!EPROMCS_N && (counter == 5'h05) && !VOTRD_N && VOTBURST_N) 
|| (!EPROMCS_N && (counter == 5'h17) && !VOTRD_N && !VOTBURST_N) 
|| (!INTCS_N && (counter == 5’h06) && !VOTWR_N) 
| | eat se =e hee) 
yeaa 


//* Update RDCEN_N output line 
assign #30 RDCEN_N = 
(RESET_N && CYCEND_N && ( 
('RAMCS_N && !VOTRD_N && 
( 


(counter == 5’hQ3) 
|| (!VOTBURST_N && (counter == 5’h09)) 
|| (!VOTBURST_N && (counter == 5’h0OF)) 
|| (!VOTBURST_N && (counter == 5’hi5)) 

) 
) 
|| (!EPROMCS_N && !VOTRD_N && 
( 

(counter == 5’h03) 
|| (!VOTBURST_N && (counter == 5’h09)) 
|| (!VOTBURST_N && (counter == 5’h0OF)) 
|| (!VOTBURST_N && (counter == 5’h15)) 

) 
) 
pule2O ies 
//* Update ACK_N output line 
assign #30 ACK_N = (RESET_N && CYCEND_N && 


( 
('RAMCS N && !VOTWR_N && 
(counter == 5 hve) 
) 
|| (RAMCS_N && !VOTRD_N && 
(Counter ==) 5) hos) 
) 
|| (!EPROMCS_N && !VOTRD_N && 
(COum ter ==) 51055 
) 


15 9 


('INTCS_N && 
(Gounter == 
) 
Vor Onl 


//* Update BUSERROR_N output line 
assign #30 BUSERROR_N = 
(RESET_N && CYCEND_N && 


(counter 
//* Update ADDRTOFIFO_N output line 
assign #30 ADDRTOFIFO_N = 


(RESET_N && CYCEND_N && USEFIFO && 
( 


(counter 
|| (!EPROMCS_N && !VOTRD_N && 
( 

('VOTBURST_N && (counter 
|| (!VOTBURST_N && (counter 
|| (!VOTBURST_N && (counter 
) 

) 
|| (!RAMCS_N && !VOTRD_N && 
( 

('VOTBURST_N && (counter 
|| (!VOTBURST_N && (counter 
|| (!VOTBURST_N && (counter 


) 


) 
eC 


//* Update CONTTOFIFO_N output line 
assign #30 CONTTOFIFO_N = 
(RESET_N && CYCEND_N && USEFIFO && 
( 


(counter 
|| (!EPROMCS_N && !VOTRD_N && 
( 
('VOTBURST_N && (counter 
| (!VOTBURST_N && (counter 


| 
|| (!VOTBURST_N && (counter 
) . 


) 


|| (!RAMCS_N && !VOTRD_N && 
( 

('VOTBURST_N && (counter 
|| (!VOTBURST_N && (counter 
|| (!VOTBURST_N && (counter 
) 


ee Ls 
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on ou 


!VOTWR_LN && 
5’h06) 


Se ee Oia 


> mia) 


Dee 7 )a) 
> heb)» 
>i) Video.) e) 


oa? 
> He. 
5 eS 


) 


a 0s) 


SEas0. oa 
DOE.) 
59*h1 5s) 


> he5)®) 
DO ry) 
5 ie 


//* Update DATATOFIFO_N output line 


assign #30 DATATOFIFO_N = 


(RESE TIN Ge CxYCEND N So USER2EO G& 


( 


(counter == 5’h05) 
|| (!EPROMCS_N && !VOTRD_N && 
( 
( 'VYOTBURST N@ae Geounter-== 5° hOB) ) 
|| (!VOTBURST_N && (counter == 5’hl11)) 
|| (!VOTBURST_N && (counter == 5’h17)) 
) 
) 
|| (}RAMCS_N && !VOTRD_N && 
( 
(!'VOTBURST_N && (counter == 5’h0B)) 
|| (!VOTBURST_N && (counter == 5’hl11)) 
|| (!VOTBURST_N && (counter == 5’'h17)) 
) 
) 
) 
) 70 
//* Update FIFOWE_N output line 
assign #30 FIFOWE_N = 
(RESET_N && CYCEND_N && USEFIFO && 
( 
(counter == 5’h01) 
|| (counter == 5°h03) 
i MeeUnt@er =——o5 Hes) 
|| (!VOTBURST_N && !VOTRD_N && (counter == 5’h07)) 
|| (!VOTBURST_N && !VOTRD_N && (counter == 5’h09)) 
|| (!VOTBURST_N && !VOTRD_N && (counter == 5’h0B)) 
|| (!VOTBURST_N && !VOTRD_N && (counter == 5’h0D)) 
|| (!VOTBURST_N && !VOTRD_N && (counter == 5’h0F)) 
|| (!VOTBURST_N && !VOTRD_N && (counter == 5’hl11)) 
{| (!VOTBURST_N && !VOTRD_N && (counter == 5’h13)) 
|| (!VOTBURST_N && !VOTRD_N && (counter == 5’h15)) 
|| (!VOTBURST_N && !VOTRD_N && (counter == 5’h17)) 


) 
} 2081; 


endmodule //* end module mem_cont 
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G. MEMORY READ/WRITE ENABLE CONTROLLER 
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Figure 53. Memory Read/Write Enable Controller. 


ff RRR RRRARKRR RRR ER RR EK RR RK RA KK RRR RRR RK RR RRR RRR ee ee 


//* File: mem_en.v 


Fe 

//* Description: Verilog behavioral file for generating memory read 
, > and write enable signals. 

ial 

//* Reference: (1) IDT RISC Microprocessor Application Guide, 

fe Application Note AN-86, IDT79R3051 System Design 
ho Example 

le ae 


//* Buthor. wenn GC - rPavyne, Jr. 
/7* Dates Sera ss 


ff BRR RE R ERR EX SX RRR RK Sk RK RN RR ee ROR ee ee KK KE KKK A ee 


‘timescale 1 ns /1 ps 


[LL RRR ERKEKKERKKEKKKEKEKKKKEKEKKKKEEKKEKEKKEKKEKKEKKKKKKEKKEKKKKKKKKEKKKKKKKKKKK EK K 


7/* Module: mem_cont 


ff 

//* Description: Verilog behavioral module for generating the read 

fi and write enables for the memory controls. 

jas This module drives the MEM_EN block in the Cadence Concept 

Le schematic. 

Li NOTE: Module name must match the Cadence Concept block name, but 
pays must be in lower case. Signal names of inout, input, and output 
Li lines and size (or bus width) must match the signal names in the 
Le Cadence Concept block. 

ia 

//* Reference: (1) IDT RISC Microprocessor Application Guide, 

fr Application Note AN-86, IDT79R3051 System Design 
ie Example 

| fas! 


Lf RAT Ke eRe ee RARE KS EAA RR RR eK RAR ARK ERR ERR RAE EAA KER RS RX 
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module mem_en (SYSCLK_N, PWRRESET_N, VOTRD_N, VOTWR_N, ENSTART_N, 
RESET_N, WREN_N, 
WRDATAEN_N, WREN_NA, WREN_NB, WREN_NC, WREN_ND, RDEN_N, 


CYCEND_N, BENO 


é 


BEND BENZ, BENS? 


RDDATAEN_N) ; 

input SYSCLK_N, //* System clock from R3081 

PWRRESET_N, //* Power (Global) reset 

VOTRD_N, //* Voted read from R3081 

VOTWR_N, //* Voted write from R3081 

ENSTART_N, //* Enable start from memory controller 

CY CENDI ZN, //* Cycle end from memory controller 

BENO, //* Byte 0 enable (active low) from R3081 (ADDR[0] ) 

BENI1, //* Byte 1 enable (active low) from R3081 (ADDR[1]) 

BEN2, //* Byte 2 enable (active low) from R3081 (ADDR[2]) 

BEN3; //* Byte 3 enable (active low) from R3081 (ADDR[3]) 
SOuUEDUE RESET oN. //* Synchronzied reset line to rest of board 

WREN_N, //* Not used 

WRDATAEN_N, //* Write data xcvr enable 

WREN_NA, //* Write enable for byte 0 

WREN_NB, //* Write enable for byte 1 

WREN_NC, //* Write enable for byte 2 

WREN_ND, //* Write enable for byte 3 

RDEN_N, //* Read output enable (for words) 


RDDATAEN_N; //* Read data xcvr enable 


wire RESET_N, WREN_N, WRDATAEN_N, WREN_NA, WREN_NB, WREN_NC, WREN_ND, 
RDEN_N, RDDATAEN_N; 


assign #30 WREN_NA = 


P(RESEITON && 
('VOTWR_LN && !BENO && !ENSTART_N && CYCEND_N) 
ee 
assign #30 WREN_NB = 
!'(RESET_N && 
('VOTWR_N && !BEN1] && !ENSTART_N && CYCEND_N) 
yes 
asSign #30 WREN_NC = 
D( RESET _N && 
('VOTWRLN && !BEN2 && !ENSTART_N && CYCEND_N) 
); 
assign #30 WREN_ND = 
!(RESET_N && 
('VOTWRLN && !BEN3 && !ENSTART_N && CYCEND_N) 
ie 
assign #30 WREN_N = 
1! (RESET_N && 
((!1VOTWR_N && CYCEND_N) || (!WREN_N && 


7 
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ICYCEND IN)? 


assign #30 WRDATAEN_N = 
!(RESET_N && 
((!VOTWR_N && !ENSTART_N) | | 
(!WRDATAEN_N && (!ENSTART_N || !CYCEND_N) ) 
i 


assign #30 RDEN_N = 
'(RESET_N && 
(!'VOTRD_N && !ENSTART_N && CYCEND_N) 
is; 


assign #30 RDDATAEN_N = 
'(RESET_N && 
(!'VOTRD_N && !ENSTART_N && CYCEND_N) 
)is 
assign #30 RESET_N = !(!PWRRESET_N) ; 


endmodule //* end module mem_en 
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H. 16-BIT NON-INVERTING TRI-STATE BUFFER 


BURP Lop lt 





Orbe 


Figure 54. 16-Bit Non-Inverting Tri-State Buffer. 


fn RN Ne ee ee 


i RE Le ee Dir Pe bos des, ve 


cae 

P/"°- Description: Venrtog Sstruiceuraltilexror 16 bit. tri —stace 
Se ae non-inverting buffer. 

Vs 


i, * AMENOY: aon CC srayMne Wis. 
i7* Dace:  117i67 9s 


LL RRR RRR KKEEKKKEKEKKKEKKKKKRKKKKKKKEKEKKKKEKKREKKKEKKKKKKKKKK KKK KKK KK KEK KKK KK 


‘timescale 1 ns /1 ps 


ff SRR ER ERK EERE ERA AER ARR RR CARR RRR AR RR RRR KR RR RR KR RRR RR RRR RR ee 


//* Module: interface 

pn 

¥V/* Description: Verilog, stmuctuzceal module for simulatino alle- ous 

ae tri-state non-inverting buffer. 

Ss This module drives the BUFF_16BIT block in the Cadence Concept 

Vf schematic. 

fp? NOTE: Module name must match the Cadence Concept block name, but 
ee Must be in lower case. Signal names of inout, input, and output 

vias lines and size (or bus width) must match the signal names in the 

Io Cadence Concept block. 


Jf REN KR EK  OR KR EA RR A KX RK XK KR RR RR ee 


mMmOcqule DUET CIG DIE (INO, IND, INZ. INS) N24 ise ie 
INS, INS: INLO, INI. 2N227 is 2nNi lee 
OUTO,. OUTIL, OUT2,. OUTS, OUT47 “OUTS, = OULG 7 OUare 
OUTS, OUTS, OUT1O, QUTI1, OUTI2, OUTIL, OUliAyw. e.- 
OE_N); 
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inpue INO... INI (INQ ests. cotN4 WiNSe NG, SENT 

ING, (INS; -cNO lie SN 2a, Nae NLS 
Cutout OUTO, *OUTl-"OUt2 Ours OUTS. ~OUTS--OuTo, ~@uT7, 

OUTS OUTS, OUTIO, Gurl, OUTIZ, OUTis, OCUTI4..OuT1s; 
INpuc On NM; 


Duei 20. #.(0 2.15230 tn dao. 0:15:30) 
bute 0 (OUTO) ING Ron NN), 
bust ((OUrTL., TNigeees):. 

butto2 (OUT2.. TZ aera). 

buri_3 (OUTS, ENS mcr), 
buff_4 (OUT4, IN4, OE_N), 

Dbuft=5S “(OUTS ihoporel) , 

butt so (OUTS, 2No weer!) 

butt 7 (OUT). Inve eee). 
burt 68. (OUTSC ENS Ore); 
butt.9 (OUT9 Pipe wore), 
buttl10 (OQUlTO ei on.N),, 

butt_1ll (COURT Ra ei OF N) , 

butt.12 (OUlrt2 we oe N)., 

butt. ls (OUTEs iis, -C bali 

buts 14 (OUT1L4, INL OFs Ge 
bute 15 (OUTlS,. TNs cra 


encdmodule //* end module buff_16bit 


rae 


I. EPROM 


EPROM 









A< Q@> 
A<1> 
AC14.. 
OE x 
csSx 







DATA< 31.. > DATA 31. . O> 


Rida Det aa se 2> 
OUTPUTENABLE_N @ 
CHIPSELECT_N @ 











Figure 55. EPROM. 


[ [REE E RE RE RAE ARERR REE ERARRK ES SAK EAA AE RA RK Oe ee ee eK Re ee ee, 


J/7/"sFule: @ceprom. v 

//* 

{/7* Description: Verilog behavioral fate for an BeRoy 
iT 

i 7 Senor ~sJOnnte 2m rayne, wir. 

//* Date: 10/28/98 


J [RE RRREREERKERREEEKERKRERKKERKKKEEKKRREKARRRRK RE RRR KKK RRRER EERE RAR AE RAE RARER 


‘timescale 1 ns /1 ps 


//* Define how many entries are in the data file for internal memory 
// =) SeEOrage: 
‘define EPROM_ENTRIES 48 


J [BREE RRR KARAAER EERE EAA ER RRR ARR EAR RE REN ER RRR ER RRR RR ee 


//* Module: eprom 


aed 

//* Description: Verilog behavioral module for simulating an EPROM. 

pe Although because of the number of address lines, it 1s capable of 
te he being 128k, it has been limited to 48 entries to reduce data 

fe * entry for simulation purposes. The memory data and intialized 
vee the data file EPROM.data. 

fen This module drives the EPROM block in the Cadence Concept 

Lp schematic. 

Zi NOTE: Module name must match the Cadence Concept block name, but 
re must be in lower case. Signal names of inout, input, and output 
Vp e lines and size (or bus width) must match the signal names in the 
ee Cadence Concept block. 


[LL RRR RRR RRR KR KK KKK KR KKK KR KR KR KR RK RK KR KR KR RK KK KR RR RR Rk RR ek RR RK RK RR RK KK 


module eprom (AQ, Al, Al4_2, OUTPUTENABLE_N, CHIPSELECT_N, DATAy 


//* EPROM Maximum Access Times *// 
parameter 
CY¥27C256 max access = 45- 


/7* Module input and sourpuc. Lanes 
input AQ, 

Al; 
IMU E (lLias2 | Ae 22. 
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input OUTPUTENABLE_N, 
CHUPSE LECTIN: 
outputs bol DATA: 


//* Internal variables (line enables) 


wire [14:0] combined_address; 
reg [31:0] memory([(0:(*EPROM_ENTRIES - 1)]; 
//* Intialize internal memory from data file 
initial 
begin 
Sreadmemh ("EPROM.data",memory) ; 
end 


//* Combine input lines into single address 
assign combined_address[0] = AO; 
assign combined_address[1] = Al; 


assign combined_address[14:2] = Al4_2; 


//* Drive data bus with data from EPROM at combined address if 
//* OUT PUTENABLEAN “ands CHIPSELECT N are both low. Drive Eo 
//* high impedance otherwise. 
assign #(CY27C256_max_access) DATA = 
(!'OUTPUTENABLE_N && 
'CHIPSELECT_N) ?memory([combined_address] :’bz; 


endmodule 


jl [= eee Xe A ee ee eee 


//* File: EPROM.data 

pale 

//* Description: Capable of being 128K EPROM Memory File 

Li 17 address lines (A[16] - A[0J]) = 

Lp 131072 lines of 32-bit data/instructions allowed 

Vicfee Only 48 entries have been supplied to reduce data entry for 

ee: Simulation purposes. 

i= 

//<seenOor  szJonn CC. Payne, Jr. 

jy Dace se 107 26798 

Lf ERERERAEER EERE EAA KERR ERR RR EEK RAE KE KER ARR EA RA KR eK Re ee © 
//* ADDRESS 

OO00R000 ~/77- 00000n 

00000001 

00000002 

00000003 

00000004 

00000005 

00000006 

COUCD00r 4 /* C0007h 

00000008 

00000009 

OOO00000A 

00000008 

0000000C 

0000000D 

OO00000E 

OOOO0000F //* O000Fh 

OOOO0COTO 7/* 00010h 
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00000011 
00000012 
00000013 
00000014 
00000015 
00000016 
00000017 
00000018 
00000019 
OOQ00001A 
00000018 
0000001C 
0000001D 
OOOO0001E 
OO00001F 
00000020 
00000021 
00000022 
00000023 
00000024 
00000025 
00000026 
00000027 
00000028 
00000029 
0000002A 
0000002B 
0000002C 
0000002D 
QO000002E 
0000002F 


ea 


hapa 


Vi 


fed * 


ffi 


00017h 


OOCLFH 


00020h 


00027h 


0002Fh 
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J. SYSTEM INTERFACE 


INT ER Garic & 






FIFOAOUT<31.. @> PiPOla< Sle 










FIEOBOUT<31... 0> PiPOre< Si. 8> “ROGER READCLK 
PIPOCCE TCS is. GS PilrOse< s1.5 0> -AsOEx A_OE_N 
EP oan EF sAlx BoOEx B_OE_N 
EF_A2_N EF_A2x GC _OEX C_OE_N 
ER SBT oN ER oBi x 
ERP=B2—N EF 82x FIRFORD* FIFORO_N 
Shee er Lex 
EF G22 EF G2 






Figure 56. System Interface. 


ff mR RAR Ae KARR KS ERR AKER EAA RE ER RS Re ee eee 


//* File: interface.v 


LL % 

//* Description: Verilog behavioral file for simulating the 
ioe interface portion of the TMR testbed. 

pal 


J/ > puedes: «Jehn Cx. Payne, <r. 
(/jeebatez, 11/15/98 


[LR RR ERR EERE EE KEKE KKKEKKKKKKEKKKKKKEKKKKKEKKEKKEKRKKKKKKKKKKKKKRKEKK EX RAR ee 


‘timescale 1 ns /1 ps 


‘define HIGH il 
‘define LOW 0 


[LER RRR RRR RK KEKE KEKE KEKE KEKE KKKEKEKKKEKKKKEKEKEKKKKKEKKKEKKKEKKEKKEKKEKKKKEKKKKKEKKKKE KS 


//* Module: interface 


lie 

//* Description: Verilog behavioral module for simulating the 

iis interface of the TMR Testbed which removes the information from 
(ee the three FIFOs dedicated to the three microprocessors. 

Li The data that is read from each FIFO is formatted and written to 
das text trace file ‘TMR_trace.out’. If the file doesn’t exist, it 
Lf = is created in the current working directory. If the file already 
Lae exists, it 1S emptied and overwritten. 

ha This module drives the INTERFACE block in the Cadence Concept 

Lie schematic. 

fe NOTE: Module name must match the Cadence Concept block name, but 
les must be in lower case. Signal names of inout, input, and output 
Lie lines and size (or bus width) must match the signal names in the 
17 Cadence Concept block. 


[LL RRR RRR KK KKK KKK KEKE KKKKKEKKKK KKK KKK KKK KKK KKK KKK KEK KKK KKK KR KKK KK KK KK KK 


module interface (FIFOAOUT, FIFOBOUT, FIFOCOUT, EF_Al1_N, EF_A2_N, 
EF_B1I_N, EF_B2_N, EF_C1_N, EF_C2_N, READCLK, 
ALOR NN, BOE N, C2ORSN, FIPORD:N); 


ie 


//* Module input and output lines 
Lp ose One ROA Oa 
FIFOBOUT, 
FPIROCOUT: 
EF_Al_N, 
ERB l= 
Beebe ll, 


EF_A2_N, 
EF_B2_N, 
Be Se 2alt: 


Tpit 


READCLK, 
A_OE_N, 
BlOESN, 
CZOESN, 
PIEORD_N, 


output 


req READCEK. 

wire FIFORD_N; 

wire £1LfOoARmpty_N, f£i1f0OBEmpty_N,- flftcCEmpty N; 
wane A-OE IN, @BsOF i. CoOB CN; 


reg [31:0] fileHandle; 
reg aOEenable, bOEenable, cOEenable, fifoRdEnable; 
reg [31:0] Adata, Bdata, Cdata, saveAdata, saveBdata, saveCdata; 
Pace rat 
begin 
READCLK = ‘LOW; 
fifoRdEnable = ‘LOW; 
aOEenable = ‘LOW; 
bOEenable = ‘LOW; 
cOEenable = ‘LOW; 
fileHandle = Sfopen("TMR_trace.out"); 
Sfdisplay(fileHandle, " CPU A CPU B 
Creu Ce 
Sfdisplay(fileHandle, 
=== SS SS SS SS = == —_ —-— ——--—— —-——-- == —=—--——-—--—=—=- ===.) 
end 
(i= COneEro. PEPO amtertace,cleck 
always 


#12.959 READCLK = 


//* Composite FIFO empty flags. 


assign #30 fifoAEmpty_N 
assign, #30° Ei: fOBeEmpey N 
assign #30 fifoCEmpty_N 


assign FIFORD_N = 


assign A_OE_N 
assign B_OE_N 
assign C_OE_N 


always 

begin 
wait ((fi1foAEmpty_N 
(ia LeoCeEmpeyun 


~READCLK; 


If not empty, Signals will be high. 
(EF_Al_N && EF_A2_N) ?1:0; 


(EP LBIN G6 ER eB2 a) oe 


(EP ECUUN s&G ER 2CZoN) 2 u- UG. 


(fifoRdEnable) ?0:1; 


(aQEenable) ?0:1; 
(bOEenable) ?0:1; 
(cOEenable) ?0:1; 


‘HIGH) ‘HIGH) && 


"HoeGH) } 


&& (fifoBEmpty_ 


oe 


begin 


//* Read FIFO A -- should be address from CPU A 
@(negedge READCLK) 
begin 
ro; 
fifoRdEnable = ‘HIGH; 
aOEenable = ‘HIGH; 
@(posedge READCLK) 
begin 
#10; 
Adata[31:0] = FPIFOAQUT(31:0)- 
fifoRdEnable = ‘LOW; 
aQOEenable = ‘LOW; 
end 
end 
//* Read FIFO B -- should be address from CPU B 
@(negedge READCLK) 
begin 
#5; 
fifoRdEnable = ‘HIGH; 
bOEenable = ‘HIGH; 
@(posedge READCLK) 
begin 
#10; 
Beate (3:0) =~FIFOBOUT(31:0)];> 
fifoRdEnable = ‘LOW; 
bOEenable = ‘LOW; 
end 
end 
//* Read FIFO C -- should be address from CPU C 
@(negedge READCLK) 
begin 
#9; 
fifoRdEnable = ‘HIGH; 
cOEenable = ‘HIGH; 
@(posedge READCLK) 
begin 
#10; 
Caata [sl 0) = FIEOCOUr (Ss. oy 
fIrtoRkaGEnablew=— oL0W:? 
cOEenable = ‘LOW; 
end 
end 


Peeerobeput adagress info from FIF@s sto diary file 
Sfdisplay(fileHandle, "Address = %$h\tth\t%h", Adata, Bdata, 


Cdata) ; 
end 
wait((£fifoAEmpty_N == ‘HIGH) && (f1f0BEmpty_N == ‘HIGH) && 
(fifoCEmpty_N == ‘HIGH)) 
begin 
//* Read FIFO A -- should be control from CPU A 


@(negedge READCLK) 


R52 


begin 


#5; 
fifoRdEnable = ‘HIGH; 
aOEenable = ‘HIGH; 
@(posedge READCLK) 
begin 
#10; 
Adatals iO = "brPOsOul (si). 
fifoRdEnable = ‘LOW; 
aOEenable = ‘LOW; 
end 
end 
//* Read FIFO B -- should be control from CPU B 
@(negedge READCLK) 
begin 
#9; 
fifoRdEnable = ‘HIGH; 
bOEenable = ‘HIGH; 
@(posedge READCLK) 
begin 
#10; 
Beatals.- 0) = FLEOCEOULIS oie 
fifoRdEnable = ‘LOw; 
bOEenable = ‘LOW; 
end 
end 
//* Read FIFO C -- should be control from CPU C 
@(negedge READCLK) 
begin 
Ho: 
fifoRdEnable = ‘HIGH; 
cOEenable = ‘HIGH; 
@(posedge READCLK) 
begin 
ine 
Cdataisi:0] = FIFOCOUT(32:0) : 
fifoRdEnable = ‘LOw; 
cOEenable = ‘LOW; 
end 
end 


//* OQUEDUE CONETO! anto from FIFOs to diary file 
Sfdisplay(fileHandle, "Control = %h\t%h\tcth", Adata, Bdata, 
Cdata) ; 


//* Save CONTROL data for displaying control status at end 
//* of reading DATA data from FIFO 


saveAdata = Adata; 
saveBdata = Bdata; 
saveCdata = Cdata; 
end 
wait((fifoAEmpty_N == ‘HIGH) && (f1ifoBEmpty_N == ‘HIGH) && 
(fifoCEmpty_N == ‘HIGH) ) 


begin 


ee 


//* Read FIFO A -- should be data to/from CPU A 
@(negedge READCLK) 


begin 
#5; 
fifoRdEnable = ‘HIGH; 
aQOEenable = ‘HIGH; 
@(posedge READCLK) 
begin 
#10; 
Adatal31:0]. = FEFOAOUT(31- 0] - 
fifoRdEnable = ‘LOW; 
aOEenable = ‘LOW; 
end 
end 
//* Read FIFO B -- should be data to/from CPU B 
@(negedge READCLK) 
begin 
#5; 
fifoRdEnable = ‘HIGH; 
bOEenable = ‘HIGH; 
@(posedge READCLK) 
begin 
#10; 
Baatals 0] = _FLFOBOUT (SE: 0); 
fifoRdEnable = ‘LOw; 
bOEenable = ‘LOW; 
end 
end 
//* Read FIFO C -- should be data to/from CPU C 
@(negedge READCLK) 
begin 
#5; 
fifoRdEnable = ‘HIGH; 
GOEeCnuable = “HIGH: 
@(posedge READCLK) 
begin 
#10; 
Gdataltsi. 0) = BLEOCOU (say); 
fifoRdEnable = ‘LOW; 
cOEenable = ‘LOW; 
end 
end 


//* OQOUEpUt data info from FIFOs te diareeile 
Sfdisplay(fileHandle, "Data = $h\csh\tth", Adata, Bdata, 
Cdata) ; 
case (saveAdata[4:2)) 
3040 4 
Sfdisplay(fileHandle, "A Control = Burst Read Word %d", 
saveAdata[1:0]); 


Seq el stle 

Sfdisplay(fileHandle, "A Control = Read"); 
Se oO 

Sfdisplay(fileHandle, "A Control = Write"); 
default: 
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Sfdisplay(fileHandle, 
Transaction"); 
endcase 


case (saveBdata[4:2]) 
3° D010: 
Sfdisplay(fileHandle, 


saveBdata[l1: 
Se oO 
Sfdisplay(fileHandle, 
or OLG: 
Sfdisplay(fileHandle, 
default: 
Sfdisplay(fileHandle, 
Transaction”); 
endcase 


case (saveCdata[4:2]) 
2475010: 
Sfdisplay(fileHandle, 


saveCdata[l 
Spit o- 
Sfdisplay(fileHandle, 
3 omoa-: 
Sfdisplay(fileHandle, 
default: 
Sfdisplay(fileHandle, 
Transaction )% 
endcase 


Sfdisplay(fileHandle, 


emcee crc cr cme me mr cr cr ce cc ce cr ce ce ce ce ce ce ee ee cee ee ee ee ee ee ee ee eee ee 


end 


endmodule //* end module interface 


MPS COnCE OL 


iB COncrrow 
OF 


"B Control 
YBGCOnErTo. 


VB SCOoncro. 


"C™EeEnero. 


Ope 


UC@eGomero. 


"OC COntro. 


UNC Come rou 


So 


Illegal Bus 


Burst Read Word %d", 


Read"); 
Write"); 


Illegal Bus 


Burst Read Word %d", 


Read”) < 
Weite') 


Illegal Bus 





APPENDIX D. CADENCE SCRIPT CONTROL LANGUAGE FILES 


This appendix contains two SCL files which were used to 


generate the simulation results obtained in Chapter V. 


A. NORMAL (ERROR FREE) SCL FILE 


lf ee 


//* File: normal.scl 


lee 

//* Description: Cadence Logic Workbench Opensim Script Control 

C= Language (SCL) file. This file executes several bus cycles for 
f= the TMR Testbed schematic. All of the bus cycles in this file 
Li Should be error free. 

pa 


J//*=-Puthor: J0hn CasPayne, Ji. 
;/* Dace.) ib s07 Se 


ff ae ee ee ee ee ee ee 


//* DEFEInNIELOnNS For transacrron codes 

//* (same aS in verilog file for R3081 module) 
NONE = 0 

READ BYTE = 1 

READ WORD = 2 

READ BURST 
WRITE _BYTE 
WRITE_WORD 


3 
4 
5 


//* Initialize board interface lines 
DEPOSIT ’PWRRESET*’, 0 
DEPOSIT “TESTENI*’, 0O 


PEPOs LT “PeR@raAS 0 
DEPOSI. TORCELB | «0 
DEFOSL? BORG ELE. "30 
BEeEOstl (USerir O°. t 
BEPOSET PULL UP “4 =i 
DEPOSIT “GND”; 0 

BEPOSIT “A_TRANS’, (NONE) 


BEPOSTT “BLTRANS’ , “(NONE) 
BEPGsit™ °C. TRANS , ANGNE) 


//* These initializations are necessary to prevent timing violations 
//*21n the simulation 

DEPOSIT *RANGS**..-4 

DEPOSIT “EPROM@GS**, 1 

DEPOSIT “INTGS=*,. 1 
DEPOSIT “WREN -A*~", 

DEFOST = WREN B= 73 

DERPOStl “WRENEC* 

DEPOSIT? “WRENS D=~.. 

DEPOSIT “RPEN-- 7 2 


Sy 


//* Hold board reset and release 
Sime LOgdms 
DEPOSIT ’PWRRESET*’, 1 


//* Advance simulation clock during initial burst read from EPROM 
//* address 1FC00000 which is initiated by the R3081 modules 
while (#°VOTRD=* ==.1) 

Sim 25ns 
While A VOURD™ “== 10) 

Sim 25ns 


Sim 50ns 


en 


//* Test Burst Read Bus Cycle from EPROM 


Tf PEER ERE EAE EKER EE EEA KE EK eK Re KA SRK 


DEPOSIT ‘’A_TRANS’, (READ_BURST) 
DEPOSIT ~BETrRaNS’.. \(READZBURST) 
DEPOsST TD. C2TRANS | \(READZBURST) 


//* Burst Read next EPROM Address 
DEPOSIT ‘’A_ADDR’, $x1FC00010 
DEPOSIT ’B_ADDR’, $x1FC00010 
DEPOSIT “CC ADDR’ | SxPPC00010 


/7/* Bavance simulation clock 


while ((#’ VOTRD*’ == 1) 
sim 25ns 

while (#’VOTRD*’ == 0) 
Sim 25ns 


//* Advance sim clock to ensure previous cycle completes 
DEPOSIT ‘A_TRANS’, (NONE) 

DEPOSIT ’B_TRANS’, (NONE) 

DEPOSIT ‘C_TRANS’, (NONE) 

BPEeOst i. A ADDR pmo Ke ZZ ecce 22 

PEEOSLIE™ BAADDR Se oxeZZZZ2222 

HEPOSER (CADPR 7 3s30722 2222.2 


sim 50ns 


[LR RRR RRR KKK KKEKKKKKKKKKKKKKKKKKKK KK KKK KKK 


(7 Test Writes Bus Cycle 


oy ee RR eR eee RRR RRR AREER 


DEPOSE® “ASETRANS’ , (WRITE_WORD) 
DEFOSS! | Balkans. (WRITE.WORD) 
DEPOSIT IT 7G] TRANS 7) (WRI TERWORD) 


//* Write to Lower RAM Boundary 
DEEOSIT “ALVADDE | Sx00000000 
DEPOSIT Basaben 500000000 
DEPOSIT ’€_ ADDR’, $x00000000 


DEE Si. Faep eae oscil ad 
DEPO@sit “BoepAtn | Sx bisiilil 


iLeye: 


DEPOSIT 


Jj / = bovance similation clock 


‘C_DATA’, 


Sx ba 


while (#’VOTWR*’ == 1) 
Sim 25ns 

while (#’VOTWR*’ == 0) 
Sim 25ns 


//* Advance sim clock to ensure previous cycle completes 


DEPOSIT “A_TRANS’, (NONE) 
DEPOSIT ‘’B_ TRANS’, (NONE) 
DEPOSIT ‘C_TRANS’, (NONE) 
DEPOSIT “A. ADDR» SxXZZZzZ2Z2772Z 
DEPOSIT “BADR yy SX27ZZ77727 
DEPOSIT “CoA@DR ,WSk2ZzzZ22222 
DEPOSIT “AD DATA’ , SX2272222722 
DEPOSIT. BY DATA. °SxXZZZZZZZZ 
DEPOSIT. “C DATA > (SxXzZzz272272Z222 
Sim 50ns 


LL RRR REE HK KKEEEKEKKKKEKKKKKKEKEKKKKKKKKK KK KK 


//* Test Write Bus Cycle 


[LL RRR ERE KKEKRKEKKKRKEKEKKEKKKKEKKEKKKKKKKKKKK KK KK 


DEPOSIT ’ATRANS 
DEPOSIT “B2lRaNs 
DEPOSIT  CatTkAns |; 


(WRITE_WORD) 
(WRITE_WORD) 
(WRITE_WORD) 


//* Write to RAM 


DEPOSIT “A_ADDR*, Sx00000004 
DEPOSIT ‘B_ADDR’, $x00000004 
DEPOSIT °C ADDR’ , Sx00000004 
DEPOSIT “A DATA’ 7 -SxX222227222 
DEPOSIT *B -DATA’, Sx222222272 
DEPOSIT. “CC 3DATA” , Sx22222222 
while (#’VOTWR*’ == 1) 
Sim 25ns 
Woe ker aie VOIR = * s=. 30; 


Sim 2ons 


//* Advance sim clock to ensure previous cycle completes 


DEPOSIT 
MEeOSi Tf 
DEPOSIT 
PEePOoiT 
DEPOSIT 
DEPOSIT 
MePOSLT 
DEPOS iT 
DEPOSIT 


Sim 50ns 


‘A_TRANS‘’, 
Ba lRAns 
CL TRANS; 
‘A_ADDR’, 
‘BLADDR’ ; 
“CLADDR; 
‘A_DATA’, 
‘B_DATA’, 
‘C_DATA’, 


(NONE) 

(NONE) 

(NONE) 
SxXzzZ2727272 
SXZZZ22 227 
SXZ22 27272 
Sx 22722727 
Spd ar dy Ay dae dar Ad 
EXMZZZZ2222 


io 


Tf ee ee ee ee ee 


//* Test Write Bus Cycle 


Ff FE PERE TE SE RES RAE REN RR RIK RN KO A RO ne 


DEPOSIT ‘A_TRANS’, (WRITE_WORD) 
DEPOSIT ‘’B_TRANS’, (WRITE_WORD)} 
DEPOSIT ‘C_TRANS’, (WRITE_WORD) 
//* Write to RAM 
DEPOSIT ’A_ADDR’, $x00000008 
DEPOSIT ’B_ADDR’, $x00000008 
DEPOSIT ’C_ADDR’, $x00000008 
DBEEOS TT) AL DATA. -eSx6s5 5555.55 
DEPOSIT’ Be DATA’ | Sx3333535 33 
DEPOSIT: “C DATA”. SxX53355366 
//* Bovance simulation -clocex 
while (#’VOTWR*’ == 1) 

Saime2 os 
while (#’VOTWR*’ == 0) 

Sim 25ns 


//* Advance sim clock to ensure previous cycle completes 


DEPOSIT ‘A_TRANS’, (NONE) 
DEPOSIT ’B_ TRANS’, (NONE) 
DEPOSIT ‘C_TRANS’, (NONE) 
DErPOGH hs “Al ADDR. Sxz2zZ7277222 
BEPOS@T ~“BlADDR’ ,. SXZZZZZZZZ 
PErPOSE “CoADDOR’ , Sx¥xZ2Z2Z2722Z22 
DEPOSIT ‘A_DATA’, $xZzZzZzZZZZzZz 
DEPOSER & BYDATA 5x2 22272222 
DE POS iis Gen Meme ome 222 Ze 77 
sim 50ns 


[J [RRR RRR RRREKREKEKKKEKKEEKEKEEKEKKKEEKEKKEKEKKKK 


//* Test Write Bus Cycle 


LR ER RR NR Re ROR RR ee ee 


DEPOSIT ’A_TRANS’, (WRITE_WORD) 
DEPOSIT ’B_TRANS’, (WRITE_WORD) 
DEPOSIT ’C_TRANS’, (WRITE_WORD) 
//* Write to RAM 
DEPOSIT ‘A_ADDR’, $x0000000C 
DEPOSIT ’B_ADDR’, $x0000000C 
DEPOSIT ’C_ADDR’, $x0000000C 
DEPOSIT ‘A _DATA’, $x44444444 
DEPOSIT ‘’B_DATA’, $x44444444 
DEPOSIT ’C_DATA’, $x44444444 
j/ = reovancersimulations clock 
while (#’VOTWR*’ == 1) 

Sim 25ns 
whee (#° VOTWR*’ == 0) 

Sim 25ns 
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//* Advance sim clock to ensure previous cycle completes 


DEPOSIT ‘A_TRANS’, (NONE) 
DEPOSIT ’B_ TRANS’, (NONE) 
DEPOSIT ‘'C_TRANS’, (NONE) 
DEPOSIT “A ADDR’ , ~SxXZZZZ2Z22z 
DEPOSIT —B-ADDR’ s SXZZ2222222 
DEPOSIT ~C ADDR’, SxXZZZZ2Z2Z222 
DEPOSIT “A° DATA) -SxXZZZZ22222z 
DEPOSIT “BUDATA" » Sxz22227222 
DEPOSIT ~CUDATAY ~~ SxXzzz2z2Z2222 
sim 50ns 


Po FB ERs ERE ORR ee ees meee Ng emt tel ee 


//* Test Read Bus Cycle 


LO ee ee ee ee ee eee 


DEPOSET “A.TRANS > ( KESD WORD) 
DEPOSIT ’B_TRANS’, (READ_WORD) 
DEPOSIT ‘’C_TRANS’, (READ_WORD) 


//* Read Lower RAM Boundary 


DEPOSIT ‘A_ADDR’, $x00000000 
DEPOSIT BUADDR”, ‘Sx00000000 
DEPOSIT “CLADDPR’, “Sx00000000 


ij *  Bavance simulation clock 
Wotle {(#*VOTRD** == 1) 

Sim 25ns 
wile (3 ‘VOTRD<~~ == 0) 

Sim 25ns 


//* Advance sim clock to ensure previous cycle completes 


DEPOSIT ‘'A_TRANS’, (NONE) 
DEPOSIT ‘B_ TRANS’, (NONE) 
DEPOSIT ‘C_TRANS’, (NONE) 
DEPOSIT “A_ADDR’, SXZZZ2zZzZZ2ZZz 
DPEPOSTLT ~B-ADDR 7 uSxXZ22222222 
DEPOSIT)’ C_ADDR 4. SXZZZZZZZ2z 
Sim 50ns 


ff RRRRRREXKKREKKKKRAREREKRRRKRKRKERERKKER EX EKER 


//* Test Burst Read Bus Cycle from RAM 


ff EERE RK ER ER RRR eR RR RAR A RAS AX KS 


DEPOSIT ‘A_TRANS’, 
DEPOSIT ‘B_TRANS’, 
DEPOSIT ‘C_TRANS’, 


(READ_BURST) 
(READ BURST) 
(READ _BURST) 


//* Burst Read from RAM 


DEPOSIT “ALADPR’ , -$x90000000 
DEPOSIT “B2apbPR , sx00U00 000 
DEPOSIT “C ADDR’, Sx00000000 
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//* Advance simulation clock 


while (#’VOTRD*’ == 1) 
Sim 25ns 

Wile (+ VOTRD> === .0) 
Sim 25ns 

DEPOSIT ‘A_TRANS’, (NONE) 

DEPOSIT ‘B_TRANS’, (NONE) 

DEPOSIT ‘C_TRANS’, (NONE) 


DEPOSIT *ALADDR. SXZ2222222 
DEPOSIT. “BeADDR > SxXZZ2222222 
DEPOSIT *C- ADDR’, SxXZZZZZzZZ2Z 


//* Advance sim clock to ensure previous cycle completes and FIFO is 


//* emptied 
Sim 150ns 


B. ERROR SCL FILE 


TREAT ER TRAE ERR KARR RENE KEARSE RRR KR ROR Re ee eee 


//* Pile: errors.scl 


fae 

//* Description: Cadence Logic Workbench Opensim Script Control 

Li= Language (SCL) file. This file executes several bus cycles for 
Ts the TMR Testbed schematic. Several of the bus cycles in this 
Pie file should contain errors. 

ia 


j7eeeuthnor: John C. Payne, Jr. 
j/7eabate: ~11/30/98 


[ [RRR RRR KRREKKER EKER REKRKKKKEKKEKEKRKEKKKKEKKKKEKKKEKKEKKEKKEKEKREKKKKRKKEREER KKK 


{//= Wetinitrons fos transaction codes 

//* (same as in verilog file for R3081 module) 
NONE = 0 
READ BYTE = 
READ WORD = 
READ BURST 
WREPEeSy Fe 
WRITE_WORD 


i 
2 


3 
= 
> 


//* Initialize board interface lines 
DEPOSIT ’PWRRESET*’, 0 
DEPOSIT ‘TESTENI*’, 0 


DEP@Sigi= “FORCE A‘, 0 
DEROsc@! “FORCE. B’, 0 
DBEGomla “FORCE CC”, QO 
DEB@Stt “USEFIFO’,. 1 
DEEOoE: “PULLAUR”’, 1 
DEPOSET ‘GND’, 0 

DEPOSIT ‘A_TRANS’, (NONE) 
DEPOsta BltRaANsS | (HONE) 
DEPOSt 1) Cares (NONE) 


//* These initializations are necessary to prevent timing violations 
//* in the simulation 
DEPOSEY “~“RAMGS*”, 1 


aoZ 


DEPOSIT ~BPROMGS* 04 
DEPOSED T ANE Se ot 

DEPOSIT -“WRENUA**,; 2 
DEPOSIT “WRENN 2B" * 5 
DEPOSIT. “WRENN jt 
DEPOSI E> WREN=D =o 
DEPOSLE “RDEN= =. 1 


//* Hold board reset and release 
Sim 1000ns 
DEPOSIT ‘’‘PWRRESET*’, 1 


//* Advance simulation clock during initial burst read from EPROM 
//* address 1FC00000 which is initiated by the R3081 modules 


While wi VO ee == 1 
Sim 25ns 

Whaler dt yOrRD =~ == 10) 
Sim 25ns 

Sim 50ns 


fe Re eee ee ee 


//* Test Write Bus Cycle 
fs - with single error in address inputs 


[if PRES RS RE na Re Re Ree ee ee 


DEPOSIT ‘A_TRANS’, 
DEPOSIT Betrans | 
DEPOSIT  “CltRANS, 


(WRITE_WORD ) 
(WRITE_WORD) 
(WRITE_WORD) 


//* Write to RAM 


DEPOSIT “A.ADDR’, SxO0CO0100 
DEPOSIT ’B_ADDR’, $x00000000 
DEPOSIT ‘C_ADDR’, $x00000000 
DEPOSIT “A DAPA. SxLiilidit 
DEPOSIT ‘B DATA’, Sxil111111 
DEPOSIT CADATA 2 Sx iii? 
J//* Advance simulation clock 
Walle -(f4VOLWR*  ==71) 

Sim 25ns 
Wolbe (4° VOLWR =~ -== 0) 

Sim 25ns 


//* Advance sim clock to ensure previous cycle and the interrupt 
//* service routine which is initiated by the R3081 complete 


DEPOSIT ‘A TRANS’, (NONE) 
DEPOSIT ’B_TRANS’, (NONE) 
DEPOSIT ‘CC _TRANS’, (NONE) 
DEPOSIT “A ADDR, SXZZZ2Z2Z2222 
DESOSLIT *“BUADDR .. SXz222722272 
DEPOSIT CADPR 4.) SXzzz222222 
DEPOSIT A AT Ae  SxZzzzz227 
DEPOSIT ~BeDATA ,°SxXZZZzZ22222 
PEPOSTU 22 DATA”, “SKZz22222e0 


Sim 3700ns 


[LL RRR RE KH EK KKK KEKEKEKKKKEKAKKEKK KAR KKK HK KKK 


//* Test Write Bus Cycle 
ee - with multiple errors in address 


la 


inputs 


Ft i aR Poe LCS IG FES Tie hal PR PRP gre Pe WO e acnS e Te Ma Daltre ieee gee 
/ 


DEPOSIT 
DEPOSIT 
DEPOSIT 


‘A_TRANS’, 
“SB _TRANS | 
*CUTRANS *; 


//* Write to RAM 


PEPOSiT 
DELOSIG 
DEFPOsIT 


DEPOS TT. 
DEPOSIT 
DEPOSiS 


‘A_ADDR’, 
“BLADDR* , 
‘CSOD; 


‘A_DATA’ , 
‘B2DATAY 
‘C_DATA’, 


(WRITE_WORD) 
(WRITE_WORD) 
(WRITE_WORD) 


$x00000004 
$x01000004 
$x00000005 


x22 2222272 
Bxeceeecece 
Sxi2 2222222 


//* Bdvance simulation clock 


while 


(#‘ VOTWR* ’ 


Sim 25ns 


while 


(#‘VOTWR* ’ 


Sim 25ns 


== ‘lth 


=.) 0) 


//* Advance sim clock to ensure previous cycle and the interrupt 
//* service routine which is initiated by the R3081 complete 


BEPOSIT 
PEPOSIET 
PEEOSIT 
DEPOSIT 
DELCSLY 
DEPOSI. 
DEPGSIE 
DEPOSTT 
DEPOSIT 


‘Dh TRANS‘, 
‘B TRANS’, 
'C TRANS’, 
‘R ADDR’, 
'B ADDR’, 
eats 
plan. 
‘'B DATA’, 
Ten Drs 


(NONE) 

(NONE) 

(NONE) 
SeReZZzZZZ272 
Siea2 222 222 
SxeZeZZ2ce 
SxMZZ2222722 
Smee ZZZccZ 
SMZZZZZ2222 


Same s 7 oOns 


LL RRR RRR EKER KEK EEK KEKE KK KKKKKEKKKK KK KEK 


//* Test Write Bus Cycle 
fas - with single error in data inputs 


[LL RRR RRR HR KKKRKEKEKKKKEKKKK KK KKK KKK KKK KKK KKK 


DEPOSIT ‘A_TRANS’, (WRITE_WORD) 
DEPOSIT ‘’B_TRANS’, (WRITE_WORD) 
DEPOSIT ‘C_TRANS’, (WRITE_WORD) 
//* Write to RAM 

BEE@SIT “ASADDR’, Sx00000008 
DEPOSIT ’B_ ADDR’, $x00000008 
DEPOSIT ‘C_ADDR’, $x00000008 
DEPOSIT ‘“ASDATA’, $x33333333 
DEEOSIT “EBMD2EA’, Sx33333333 
BEEOSIn ) @eDATA .95x%39333337 
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J/7/* Advance simulation clock 


while (#’VOTWR*’ == 1) 
Sim 25ns 

while (#’VOTWR*’ == Q) 
Sim 25ns 


//* Advance sim clock to ensure previous cycle and the interrupt 
//* service routine which is initiated by the R3081 complete 


DEPOSIT ‘A_TRANS’, (NONE) 
DEPOSIT ’‘’B_TRANS’, (NONE) 
DEPOSIT ‘’C_TRANS’, (NONE) 
DEPOSIT *“AMWADDR DoS ZZ2Z227222 
DEPOSIT ’B_ADDR’, $XZZZZZZZz 
DEPOSIT. “CLADDR’ 2-Sxzzz222722 
DEPOSIT “Al DATA’ , “SKZZZ22222 
DEPOS@T Bop ATA | .5SXZZ 222222 
DEPOSIT C “DATA . SXZZZ222222 


sim 3700ns 


fF Te FPA ON I aes ens ge ret ce ee In tage a Cn ay eae 


//* Test Write Bus Cycle 
ies - with multiple errors in data inputs 


fo RR eR ee ee 


DEPOSIT ‘’A_TRANS’, (WRITE _WORD) 
DEPOSIT °“B TRANS’, (WRITE WORD) 
DEPOSIT ‘'C_TRANS’, (WRITE_WORD) 
//* Write to RAM 

DEPOSIT ‘A_ADDR’, $x0000000C 
DEPOSIT ’B_ADDR’, $x0000000C 
DEPOSIT ‘C_ADDR’, $x0000000C 
DEPOSIT ‘’A_DATA’, SxF4444444 
DEPOSIT ‘B_ DATA’, $x44A44444 
DEPOSIT ‘C_DATA’, $x44444447 


J/* Bdvance simulation clock 


woe (#- VOEWwR*”? == 51) 
Sim 25ns 

while (#’VOTWR*’ == 0) 
Sim 25ns 


//* Advance sim clock to ensure previous cycle and the interrupt 
//* service routine which is initiated by the R3081 complete 


DEPOSIT ‘A_TRANS’, (NONE) 
DEPOSIT ‘B_ TRANS’, (NONE) 
DEPOSIT ‘C_TRANS’, (NONE) 
DEPOSIT.“ ACADDR’ | aSXZz222222 
DEPOSET  BeADDR sx 22 222222 
DEPOSIT “C_ADDR’ 3, SXzZzzz22z22z 
DEPOSIT “ASDATA » SXzZ2Zz222z222 
DEPOSLT = B-DATA’ |) Sxzzz7z22222 
DEPOSI I.-C DATA”, SXZZZzZz2222 


sim 3700ns 


aos 


Piet ee Re ee A ee a ee A ee 


//* Test Burst Read Bus Cycle 


[ [RRR RRREERREKREREREERKRERKRE RR ER RRR KR AKERKK ERE © 


DEPOSIT ‘A_TRANS’, (READ_BURST) 
DEPOSIT “B_TRANS , (READ BURST) 
DEPOSIT “C.TRANS , (READLBURS®) 


//* Burst Read from RAM 


DEPOSIT “AZ ADDR’, Sx900000000 
DEPOSIT ~“BLADDR’, sxOQ0000000 
DEPOSIT ‘C_ADDR’, $x00000000 


//* Advance simulation clock 


while (#’VOTRD*’ == 1) 
Sim 25ns 

While (#°VOTRD*” == 0) 
Sim 25ns 


//* Advance sim clock to ensure previous cycle completes 


DEPOSIT ‘A_TRANS’, (NONE) 
DEPOS@tT- “BetTRANS’, (NONE) 
DEPOS@? CatTRANS’, (NONE) 
DEPOSIT. ASADDR’ , SXZzZz2zZ2ZZ22 
DEPOSIT © B ADDR’, SxXZZZ222Zz2 
DEPGSIl ms ©CeADDR 7 6Sx22222222 
DEPOSLIT-—"AUDATA , SXZZ22222272 
DEEOSIT “°“B DATA’. SXZZzZZZ2ZZZ 
BEPOSIT *C_DAES”. SxXZ2Z22222Z2Z 
Sim 50ns 


[ [RRR KKRKK KKK KKK KKK RR RR KR RK Rk KK RK RK 


//* Test Write Bus Cycle 


fy Vein error 1m COMerol Inpucs 
ers Kr TKK KEKE ARR RR RARER EER NK Re Re ee 


DEPOSIT ‘A_TRANS’, (WRITE_WORD) 
DEPOSIT ’B_ TRANS’, (READ_BURST) 
DEPOSTI. CarRANs,’ | (WRITE _WORD) 
//* Write to RAM 
DEPOSIT ’A_ADDR’, $x00004000 
DEPOSIT ‘B_ ADDR’, $x00004000 
DEPOSIT ‘C\ADPER, Sx00004000 
DEPOSIT ‘A_DATA’, $x78787878 
DEPOSLTT ~B2 DATA’, Sx72e738/878 
DEPOSTET *“C_DATA’, Sx78787878 
//* Advance simulation clock 
Wiheheostt’ VOLWR= == J) 

Sim 25ns 
Witikrewt+ VOTWR. == 0) 

sim Z25ns 
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//* Advance sim clock to ensure previous cycle and the interrupt 
//* service routine which is initiated by the R3081 complete 


DEPOSI. 
DEEOSET 
DEPOSIT 
DEPOSIT 
DEPOSIT 
DEPOSIT 
DEPOSIT 
PEPOSIT 
DEPOSET 


‘A_TRANS’, 
1 BoTRANS 4 
‘CT RANS* 3 
‘A_ADDR’, 
VBAAEDR 
‘C_ADDR”, 
RL DATES 
“BUOATA’; 
‘C_DATA’, 


(NONE) 

(NONE) 

(NONE) 
SMZZ2Z2222 
Sez 2222422 
Sp IAAP AIA TAP ADE 
Se 2227222 
Sxzzecucas 
SXZZ2Z22Z222 


Sim 3700ns 


Lf Pete EEE RRR ORS Roe ee 


//* Test Read Bus Cycle 


LL EERE REE KEEKRKEEKEEKRKEKKEKKEKKKKKKKKKKKKKKKK KKK * 


DEPOSIT “A_TRANS’, {RKESD2WORD) 
DEPOSIT ’B_TRANS’, (READ_WORD) 
DEPOSIT “CETRANS’; (REAP WORD) 


//* Burst Read from RAM 


DEPOSIT ‘A_ADDR‘’, $x00004000 
DEPOSIT ‘B_ ADDR’, $x00004000 
DEPOSIT “CC SADDR’ ] $x000024000 
//* Advance simulation clock 
Walle (#*VOLKDs -=—i i.) 

Sim 25ns 
while (¢*°VOTRD* “== 0) 

Sim 25ns 
DEPOSIT ‘A TRANS’, (NONE) 
DEPOSIT “Be TRANS’ | {NOME 
DEPOSIT “C_-TRANS” , (NONBS) 
DEPOStER YA SADDR 3 Sxz22 22277 
DEPOSTL 'SBeADDR ~bsxz22222222 
DEPOSTLT- “CC SADDR, 25x27 2722222 
DEPOSI {AL DAGAY jw sxZ222 22222 
DEPOSIT “BeawATA | Sx2227272222 
BEPOSIT “CC sBATA > SxXz2z772z227 


//* Advance sim clock to ensure previous cycle completes and FIFO is 


//* emptied 
Sim 5ens 


od 





RO 


alos 
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